CVE-2022-50466

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/10/2025
Last modified:
16/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> fs/binfmt_elf: Fix memory leak in load_elf_binary()<br /> <br /> There is a memory leak reported by kmemleak:<br /> <br /> unreferenced object 0xffff88817104ef80 (size 224):<br /> comm "xfs_admin", pid 47165, jiffies 4298708825 (age 1333.476s)<br /> hex dump (first 32 bytes):<br /> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br /> 60 a8 b3 00 81 88 ff ff a8 10 5a 00 81 88 ff ff `.........Z.....<br /> backtrace:<br /> [] __alloc_file+0x21/0x250<br /> [] alloc_empty_file+0x41/0xf0<br /> [] path_openat+0xea/0x3d30<br /> [] do_filp_open+0x1b9/0x290<br /> [] do_open_execat+0xce/0x5b0<br /> [] open_exec+0x27/0x50<br /> [] load_elf_binary+0x510/0x3ed0<br /> [] bprm_execve+0x599/0x1240<br /> [] do_execveat_common.isra.0+0x4c7/0x680<br /> [] __x64_sys_execve+0x88/0xb0<br /> [] do_syscall_64+0x35/0x80<br /> <br /> If "interp_elf_ex" fails to allocate memory in load_elf_binary(),<br /> the program will take the "out_free_ph" error handing path,<br /> resulting in "interpreter" file resource is not released.<br /> <br /> Fix it by adding an error handing path "out_free_file", which will<br /> release the file resource when "interp_elf_ex" failed to allocate<br /> memory.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.7 (including) 5.10.153 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.77 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.0.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*