PT-2025-49626 · Linux · Linux Kernel

Published

2025-12-09

·

Updated

2026-02-24

·

CVE-2022-50646

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the hpsa init one() function within the SCSI subsystem of the Linux kernel. The hpda alloc ctlr info() function allocates memory for a controller information structure (h) and its reply map field. If alloc percpu() fails during initialization, the function prematurely jumps to a cleanup routine, freeing the controller structure (h) but failing to release the associated h->reply map, resulting in a memory leak. The fix involves calling hpda free ctlr info() to properly release both h->reply map and h before freeing h directly.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2022-50646
OESA-2026-1074
SUSE-SU-2026:0263-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0350-1
SUSE-SU-2026:0369-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1

Affected Products

Linux Kernel