CVE-2022-50754
published 2025-12-24CVE-2022-50754: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the variable…
PriorityP421
EPSS
0.22%
13.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 11d5fe7da67c3334cefc981297fd5defb78df15c | 11d5fe7da67c3334cefc981297fd5defb78df15c |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 95e6adc6a7a4761ddf69ad713e55a06a3206309d | 95e6adc6a7a4761ddf69ad713e55a06a3206309d |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < eb0f78e28cbc8f97439c0a4c80ee5160c1df5ce6 | eb0f78e28cbc8f97439c0a4c80ee5160c1df5ce6 |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 935d86b29093e75b6c547d90b3979c2c2d23f1c4 | 935d86b29093e75b6c547d90b3979c2c2d23f1c4 |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 775a37ffa9f4681c4ad84c8634a7eec8af7098d4 | 775a37ffa9f4681c4ad84c8634a7eec8af7098d4 |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 88989932c2269ea66074f52a6213598838f8b9e7 | 88989932c2269ea66074f52a6213598838f8b9e7 |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < 3d27a436e294ac5d7a51bd5348ca63a42a468b35 | 3d27a436e294ac5d7a51bd5348ca63a42a468b35 |
| linux | linux | >= 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 < c73275cf6834787ca090317f1d20dbfa3b7f05aa | c73275cf6834787ca090317f1d20dbfa3b7f05aa |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.13.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
apparmor: fix a memleak in multi_transaction_new()
osv·2025-12-24
CVE-2022-50754 apparmor: fix a memleak in multi_transaction_new()
apparmor: fix a memleak in multi_transaction_new()
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
GHSA
GHSA-fx2h-pcqr-7fq9: In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), t
ghsa_unreviewed·2025-12-24
CVE-2022-50754 GHSA-fx2h-pcqr-7fq9: In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), t
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
OSV
CVE-2022-50754: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the
osv·2025-12-24
CVE-2022-50754 CVE-2022-50754: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the variable t is not freed or passed out on the failure of copy_from_user(t->data, buf, size), which could lead to a memleak. Fix this bug by adding a put_multi_transaction(t) in the error path.
Red Hat
kernel: apparmor: fix a memleak in multi_transaction_new()
vendor_redhat·2025-12-24
CVE-2022-50754 [MEDIUM] kernel: apparmor: fix a memleak in multi_transaction_new()
kernel: apparmor: fix a memleak in multi_transaction_new()
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Ha
Debian
CVE-2022-50754: linux - In the Linux kernel, the following vulnerability has been resolved: apparmor: f...
vendor_debian·2022
CVE-2022-50754 CVE-2022-50754: linux - In the Linux kernel, the following vulnerability has been resolved: apparmor: f...
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the variable t is not freed or passed out on the failure of copy_from_user(t->data, buf, size), which could lead to a memleak. Fix this bug by adding a put_multi_transaction(t) in the error path.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50754 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50754 CVE-2022-50754 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50754 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
dlm-kmp-default
kernel-syms
Sources
NVD
Debian 11,
Bugzilla
CVE-2022-50754 kernel: apparmor: fix a memleak in multi_transaction_new()
bugzilla·2025-12-24
CVE-2022-50754 [MEDIUM] CVE-2022-50754 kernel: apparmor: fix a memleak in multi_transaction_new()
CVE-2022-50754 kernel: apparmor: fix a memleak in multi_transaction_new()
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out
on the failure of copy_from_user(t->data, buf, size), which could lead
to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2022-50754-ec9a@gregkh/T
https://git.kernel.org/stable/c/11d5fe7da67c3334cefc981297fd5defb78df15chttps://git.kernel.org/stable/c/3d27a436e294ac5d7a51bd5348ca63a42a468b35https://git.kernel.org/stable/c/775a37ffa9f4681c4ad84c8634a7eec8af7098d4https://git.kernel.org/stable/c/88989932c2269ea66074f52a6213598838f8b9e7https://git.kernel.org/stable/c/935d86b29093e75b6c547d90b3979c2c2d23f1c4https://git.kernel.org/stable/c/95e6adc6a7a4761ddf69ad713e55a06a3206309dhttps://git.kernel.org/stable/c/c73275cf6834787ca090317f1d20dbfa3b7f05aahttps://git.kernel.org/stable/c/eb0f78e28cbc8f97439c0a4c80ee5160c1df5ce6
2025-12-24
Published