CVE-2022-50466
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/10/2025
Last modified:
16/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fs/binfmt_elf: Fix memory leak in load_elf_binary()<br />
<br />
There is a memory leak reported by kmemleak:<br />
<br />
unreferenced object 0xffff88817104ef80 (size 224):<br />
comm "xfs_admin", pid 47165, jiffies 4298708825 (age 1333.476s)<br />
hex dump (first 32 bytes):<br />
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br />
60 a8 b3 00 81 88 ff ff a8 10 5a 00 81 88 ff ff `.........Z.....<br />
backtrace:<br />
[] __alloc_file+0x21/0x250<br />
[] alloc_empty_file+0x41/0xf0<br />
[] path_openat+0xea/0x3d30<br />
[] do_filp_open+0x1b9/0x290<br />
[] do_open_execat+0xce/0x5b0<br />
[] open_exec+0x27/0x50<br />
[] load_elf_binary+0x510/0x3ed0<br />
[] bprm_execve+0x599/0x1240<br />
[] do_execveat_common.isra.0+0x4c7/0x680<br />
[] __x64_sys_execve+0x88/0xb0<br />
[] do_syscall_64+0x35/0x80<br />
<br />
If "interp_elf_ex" fails to allocate memory in load_elf_binary(),<br />
the program will take the "out_free_ph" error handing path,<br />
resulting in "interpreter" file resource is not released.<br />
<br />
Fix it by adding an error handing path "out_free_file", which will<br />
release the file resource when "interp_elf_ex" failed to allocate<br />
memory.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.7 (including) | 5.10.153 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.77 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.0.7 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



