CVE-2022-50140

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: memstick/ms_block: Fix a memory leak 'erased_blocks_bitmap' is never freed. As it is allocated at the same time as 'used_blocks_bitmap', it is likely that it should be freed also at the same time. Add the corresponding bitmap_free() in msb_data_clear().

Rincian

Terbit di NVD

18 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/16e07966638717416abf45393d6a80a5a1034429 patch
• https://git.kernel.org/stable/c/37958980eb4cd71ae594ace093c11b6a91e165e8 patch
• https://git.kernel.org/stable/c/39be95d1ff7b44c1e969af72ba9da7332dfcc1da patch
• https://git.kernel.org/stable/c/54eb7a55be6779c4d0c25eaf5056498a28595049 patch
• https://git.kernel.org/stable/c/9260a154b3b5e387dbceec7c0ac441470646bc6f patch
• https://git.kernel.org/stable/c/961d7d12080fe70847f944d656e36cd0dd0214ba patch
• https://git.kernel.org/stable/c/9d8b911fe3c3ed788c66edba7c90e32a4a7a5f53 patch
• https://git.kernel.org/stable/c/efd675246aec045507b9425c67b548cc2d782d8f patch