CVE-2022-50765

published 2025-12-24

CVE-2022-50765: In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of elf header buffer This is reported by kmemleak detector…

Priority P4 20

In the Linux kernel, the following vulnerability has been resolved:

RISC-V: kexec: Fix memory leak of elf header buffer

This is reported by kmemleak detector:

unreferenced object 0xff2000000403d000 (size 4096):
comm "kexec", pid 146, jiffies 4294900633 (age 64.792s)
hex dump (first 32 bytes):
7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 .ELF............
04 00 f3 00 01 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] kmemleak_vmalloc+0x3c/0xbe
[] __vmalloc_node_range+0x3ac/0x560
[] __vmalloc_node+0x56/0x62
[] vzalloc+0x2c/0x34
[] crash_prepare_elf64_headers+0x80/0x30c
[] elf_kexec_load+0x3e8/0x4ec
[] kexec_image_load_default+0x40/0x4c
[] sys_kexec_file_load+0x1c4/0x322
[] ret_from_syscall+0x0/0x2

In elf_kexec_load(), a buffer is allocated via vzalloc() to store elf
headers. While it's not freed back to system when kdump kernel is
reloaded or unloaded, or when image->elf_header is successfully set and
then fails to load kdump kernel for some reason. Fix it by freeing the
buffer in arch_kimage_file_post_load_cleanup().

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= 8acea455fafaf2620b247de6c00774828b618a82 < 090bfcfc9f14d05154893c67eeaecc56e894fbae	090bfcfc9f14d05154893c67eeaecc56e894fbae
linux	linux	>= 8acea455fafaf2620b247de6c00774828b618a82 < cdea2da6787583ecca43594132533a2ac8d7cd21	cdea2da6787583ecca43594132533a2ac8d7cd21
linux	linux	>= 8acea455fafaf2620b247de6c00774828b618a82 < cbc32023ddbdf4baa3d9dc513a2184a84080a5a2	cbc32023ddbdf4baa3d9dc513a2184a84080a5a2
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 5.19.0 < 6.0.18	6.0.18
linux	linux_kernel	>= 6.1.0 < 6.1.4	6.1.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.