CVE-2022-50761
published 2025-12-24CVE-2022-50761: In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name has…
PriorityP419low5.5
EPSS
0.26%
17.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 9278bdbb566656b3704704f8dd6cbc24a6fcc569 | 9278bdbb566656b3704704f8dd6cbc24a6fcc569 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 07764d00c869a3390bd4f80412cc8b0e669e6c58 | 07764d00c869a3390bd4f80412cc8b0e669e6c58 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 53ff99c76be611acea37d33133c9136969914865 | 53ff99c76be611acea37d33133c9136969914865 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 29198f667f4486f9e227e11faf1411fcf4c82a66 | 29198f667f4486f9e227e11faf1411fcf4c82a66 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 70e7f308d7a8e915c7fbc0f1d959968eab8000cd | 70e7f308d7a8e915c7fbc0f1d959968eab8000cd |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 70966d6b0f59f795b08a70adf5e4478348ecbfbb | 70966d6b0f59f795b08a70adf5e4478348ecbfbb |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < 798fc3cf98ca07e448956f39295c5d686ab4b054 | 798fc3cf98ca07e448956f39295c5d686ab4b054 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < b44457b83a034efef58ffa5f3131d4615f1a9837 | b44457b83a034efef58ffa5f3131d4615f1a9837 |
| linux | linux | >= 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79 < ca84ce153d887b1dc8b118029976cc9faf2a9b40 | ca84ce153d887b1dc8b118029976cc9faf2a9b40 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.27 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50761 [LOW] CWE-772 kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
A flaw was found in the Linux kernel's x86/xen component. A local user could exploit a memory leak vulnerability during the initialization of the CPU lock in the `xen_init_lock_cpu()` function. If a specific internal function fails after memory allocation, the allocated memory is not properly released. This can lead to resource exhaustion and a Denial of Service (DoS) condition on the affected sys
Debian
CVE-2022-50761: linux - In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fi...
vendor_debian·2022
CVE-2022-50761 CVE-2022-50761: linux - In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fi...
In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(), if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead to a memory leak issue, fix it.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-9498-f72m-xmv4: In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @nam
ghsa_unreviewed·2025-12-24
CVE-2022-50761 GHSA-9498-f72m-xmv4: In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @nam
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
OSV
CVE-2022-50761: In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name
osv·2025-12-24
CVE-2022-50761 CVE-2022-50761: In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name
In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(), if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead to a memory leak issue, fix it.
OSV
x86/xen: Fix memory leak in xen_init_lock_cpu()
osv·2025-12-24
CVE-2022-50761 x86/xen: Fix memory leak in xen_init_lock_cpu()
x86/xen: Fix memory leak in xen_init_lock_cpu()
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50761 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50761 CVE-2022-50761 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50761 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 20.3
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
kernel-livepatch-5.10.165-143.735
linux-hwe
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: D
Bugzilla
CVE-2022-50761 kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
bugzilla·2025-12-24
CVE-2022-50761 [LOW] CVE-2022-50761 kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
CVE-2022-50761 kernel: Linux kernel (x86/xen): Memory leak in CPU lock initialization leading to denial of service.
In the Linux kernel, the following vulnerability has been resolved:
x86/xen: Fix memory leak in xen_init_lock_cpu()
In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(),
if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead
to a memory leak issue, fix it.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122455-CVE-2022-50761-0e67@gregkh/T
https://git.kernel.org/stable/c/07764d00c869a3390bd4f80412cc8b0e669e6c58https://git.kernel.org/stable/c/29198f667f4486f9e227e11faf1411fcf4c82a66https://git.kernel.org/stable/c/53ff99c76be611acea37d33133c9136969914865https://git.kernel.org/stable/c/70966d6b0f59f795b08a70adf5e4478348ecbfbbhttps://git.kernel.org/stable/c/70e7f308d7a8e915c7fbc0f1d959968eab8000cdhttps://git.kernel.org/stable/c/798fc3cf98ca07e448956f39295c5d686ab4b054https://git.kernel.org/stable/c/9278bdbb566656b3704704f8dd6cbc24a6fcc569https://git.kernel.org/stable/c/b44457b83a034efef58ffa5f3131d4615f1a9837https://git.kernel.org/stable/c/ca84ce153d887b1dc8b118029976cc9faf2a9b40
2025-12-24
Published