CVE-2022-50811
published 2025-12-30CVE-2022-50811: In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta…
PriorityP420low3.3
EPSS
0.21%
10.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= cec6e93beadfd145758af2c0854fcc2abb8170cb < 091a8ca572a2e48554427feda78aa503e98c1028 | 091a8ca572a2e48554427feda78aa503e98c1028 |
| linux | linux | >= cec6e93beadfd145758af2c0854fcc2abb8170cb < 373b6f350aecf5dca2e7474f0b4ec8cca659f2f0 | 373b6f350aecf5dca2e7474f0b4ec8cca659f2f0 |
| linux | linux | >= cec6e93beadfd145758af2c0854fcc2abb8170cb < d5d188b8f8b38d3d71dd05993874b4fc9284ce95 | d5d188b8f8b38d3d71dd05993874b4fc9284ce95 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.13.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
vendor_redhat·2025-12-30·CVSS 3.3
CVE-2022-50811 [LOW] CWE-772 kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
A resource leak flaw was found in the Linux kernel's EROFS filesystem. When z_erofs_get_extent_compressedlen() fails, the corresponding meta buffer is not properly unmapped, leading to a memory leak over time.
Statement: This is a minor memory leak in the EROFS filesystem that requires mounting a malformed EROFS image to trigger. The leak occurs only on error paths and does not lead to crashes or data exposure, limiting practical impact.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise L
Debian
CVE-2022-50811: linux - In the Linux kernel, the following vulnerability has been resolved: erofs: fix ...
vendor_debian·2022
CVE-2022-50811 CVE-2022-50811: linux - In the Linux kernel, the following vulnerability has been resolved: erofs: fix ...
In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta buffers could be leaked.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-8fxj-p2h6-vh9g: In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise,
ghsa_unreviewed·2025-12-30
CVE-2022-50811 GHSA-8fxj-p2h6-vh9g: In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise,
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
OSV
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
osv·2025-12-30
CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
OSV
CVE-2022-50811: In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, me
osv·2025-12-30
CVE-2022-50811 CVE-2022-50811: In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, me
In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta buffers could be leaked.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50811 kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
bugzilla·2025-12-30
CVE-2022-50811 [LOW] CVE-2022-50811 kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
CVE-2022-50811 kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123013-CVE-2022-50811-66f4@gregkh/T
Wiz
CVE-2022-50811 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50811 CVE-2022-50811 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50811 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
Otherwise, meta buffers could be leaked.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 6.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
bpftool
kernel-64k-debug-modules-partner
Sources
NVD
Debian 12, 13, 14 Has Fix Added at: Dec 31, 2025
Echo Has Fix Added at: Dec 31, 2025
Red Hat 9 Severity LOW Has Fix Added at: Dec 31, 2025
Ubuntu 16.04, 18.04, 2
2025-12-30
Published