CVE-2022-50743 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
erofs: Fix pcluster memleak when its block address is zero
syzkaller reported a memleak:
https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed
unreferenced object 0xffff88811009c7f8 (size 136):
...
backtrace:
[] z_erofs_do_read_page+0x99b/0x1740
[] z_erofs_readahead+0x24e/0x580
[] read_pages+0x86/0x3d0
...
syzkaller constructed a case: in z_erofs_register_pcluster(),
ztailpacking = false and map->m_pa…
Affected Packages4 packages
▶CVEListV5linux/linuxcecf864d3d76d50e3d9c58145e286a0b8c284e92 — ac54c1f7b288d83b6ba1e320efff24ecc21309cd+3
🔴Vulnerability Details
3OSV▶
CVE-2022-50743: In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller reported a me↗2025-12-24
GHSA▶
GHSA-x7fv-mvjx-m6c8: In the Linux kernel, the following vulnerability has been resolved:
erofs: Fix pcluster memleak when its block address is zero
syzkaller reported a↗2025-12-24