PT-2025-40151 · Linux+1 · Linux Kernel+1

Published 2022-10-25 · Updated 2025-10-23 · CVE-2022-50466

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the load elf binary() function within the Linux kernel's fs/binfmt elf component. This leak occurs when interp elf ex fails to allocate memory, leading to an unreleased file resource. Specifically, if interp elf ex fails, the program enters the "out free ph" error handling path without releasing the "interpreter" file resource. The fix involves adding an "out free file" error handling path to release the file resource when memory allocation fails in interp elf ex. The function alloc file is involved in the allocation process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-06092

CVE-2022-50466

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Linux Kernel

Suse

References · 860

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50466.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50466 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50466 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50466 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50466 · Vendor Advisory
• https://git.kernel.org/stable/c/acd9b4914f1c5928c7ae8ebc623d6291eb1a573a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50466 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50466 · Vendor Advisory
• https://git.kernel.org/stable/c/265b6fb780f57d10449a40e94219b28fa52479cc · Patch
• https://git.kernel.org/stable/c/594d2a14f2168c09b13b114c3d457aa939403e52 · Patch