PT-2025-53966 · Linux · Linux Kernel

Published 2022-11-09 · Updated 2026-02-24 · CVE-2022-50848

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the dio init() function within the Direct I/O (DIO) driver of the Linux kernel. Specifically, if the device register() function returns an error, the allocated memory for 'dev' and its name was not properly freed. This issue has been addressed by adding a release function and calling put device() in the error path, ensuring that the name is freed during kobject cleanup and 'dev' is freed within the release function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-02273

CVE-2022-50848

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 986

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50848.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50848 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50848 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02273 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50848 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50848 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50848 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50848 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note