CVE-2022-50025

cxl: Fix a memory leak in an error handling path

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:01 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmap_zalloc() must be balanced by a corresponding bitmap_free() in the error handling path of afu_allocate_irqs().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.19 ≤ v < 4.14.2913.19 ≤ v < 4.19.2563.19 ≤ v < 4.9.3263.19 ≤ v < 5.10.1383.19 ≤ v < 5.15.633.19 ≤ v < 5.19.43.19 ≤ v < 5.4.2113.19 ≤ v < 6.04.10 ≤ v < 4.14.2914.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2115.11 ≤ v < 5.15.635.16 ≤ v < 5.19.45.5 ≤ v < 5.10.1383.1980fa93fce37d3490f4bb0da8a5b239a6745bc744
Vendor states this is fixed in 3a15b45b5454da862376b5d69a4967f5c6fa1368 (fixed)
Vendor states this is fixed in 4be138bcd6d68cec0ce47051b117541061f5141a (fixed)
Vendor states this is fixed in 6544ff559315498ad6c0a311359ca44987f9ca07 (fixed)
Vendor states this is fixed in 695af60af755873399ce01cb97176768828bc1fd (fixed)
Vendor states this is fixed in 89d51dc6878c47b6400922fac21b6a33f9d1a588 (fixed)
Vendor states this is fixed in addff638c41753639368c252d0c5ba0d8fe9ed97 (fixed)
Vendor states this is fixed in c2557780ee7818b701681c226fa4cb7c0b171665 (fixed)
Vendor states this is fixed in c2c7a29f99788e9e5dfe41d16868ea33da7cc235 (fixed)
Vendor states this is fixed in 3.19 (unaffected)
Vendor states this is fixed in 4.14.291 (unaffected)
Vendor states this is fixed in 4.19.256 (unaffected)
Vendor states this is fixed in 4.9.326 (unaffected)
Vendor states this is fixed in 5.10.138 (unaffected)
Vendor states this is fixed in 5.15.63 (unaffected)
Vendor states this is fixed in 5.19.4 (unaffected)
Vendor states this is fixed in 5.4.211 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3a15b45b5454da862376b5d69a4967f5c6fa1368
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4be138bcd6d68cec0ce47051b117541061f5141a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6544ff559315498ad6c0a311359ca44987f9ca07
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/695af60af755873399ce01cb97176768828bc1fd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/89d51dc6878c47b6400922fac21b6a33f9d1a588
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/addff638c41753639368c252d0c5ba0d8fe9ed97
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c2557780ee7818b701681c226fa4cb7c0b171665
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c2c7a29f99788e9e5dfe41d16868ea33da7cc235

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card