CVE-2022-50742 — Missing Release of Resource after Effective Lifetime in Linux

CWE-772 — Missing Release of Resource after Effective Lifetime7 documents6 sources
Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedDec 24

Description

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afu_ioctl() eventfd_ctx_put need to be called to put the refcount that gotten by eventfd_ctx_fdget when ocxl_irq_set_handler fails.

Affected Packages4 packages

▶Linuxlinux/linux_kernel5.2.0 — 5.4.220+4
▶Debianlinux/linux_kernel< 5.10.158-1+3
▶CVEListV5linux/linux060146614643ddc5978c73ffac0329762b4651c9 — fc797285c40a9cc441357abb3521d3e51c743f67+6
▶debiandebian/linux< linux 6.0.3-1 (bookworm)

🔴Vulnerability Details

3
OSV
misc: ocxl: fix possible refcount leak in afu_ioctl()↗2025-12-24
▶
OSV
CVE-2022-50742: In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afu_ioctl() eventfd_ctx_put need to be c↗2025-12-24
▶
GHSA
GHSA-7fvc-c9hj-7pgf: In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afu_ioctl() eventfd_ctx_put need to be↗2025-12-24
▶

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service via refcount leak in ocxl afu_ioctl()↗2025-12-24
▶
Debian
CVE-2022-50742: linux - In the Linux kernel, the following vulnerability has been resolved: misc: ocxl:...↗2022
▶

🕵️Threat Intelligence

1
Wiz
CVE-2022-50742 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶