PT-2025-40147 · Linux · Linux Kernel

Published 2025-10-01 · Updated 2025-10-01 · CVE-2022-50462

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak could occur during module exit in the MIPS virtual processor environment (vpe-mt). After a specific commit (1fa5ae857bb1), device names are dynamically allocated and require freeing upon module exit using put device() to allow cleanup via kobject cleanup() when the reference count reaches zero. The vpe device is static, removing the need for kfree() in vpe device release().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-50462

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50462.json · Exploit
• https://git.kernel.org/stable/c/ab3d47c1fd0202821abd473ca87580faafd47847 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50462 · Vendor Advisory
• https://git.kernel.org/stable/c/b191dde84e40624d5577f64db0ec922c5c0ec57c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50462 · Vendor Advisory
• https://git.kernel.org/stable/c/9d180e0bb21c57bd6cca2adeb672d3b522e910b5 · Patch
• https://git.kernel.org/stable/c/5822e8cc84ee37338ab0bdc3124f6eec04dc232d · Patch
• https://git.kernel.org/stable/c/851ae5640875f06494e40002cd503b11a634c6fb · Patch
• https://git.kernel.org/stable/c/48d42f4464d713fbdd79f334fdcd6e5be534cc67 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50462 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50462 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50462 · Vendor Advisory
• https://git.kernel.org/stable/c/170e9913c2ed5cfc37c0adf0fdbd368d2d8d8168 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50462 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50462 · Security Note