« Volver al listado

CVE-2022-50646

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix possible memory leak in hpsa_init_one()

The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map.

Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-50646",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "f4d1c14e8b404766ff2bb8644bb19443d73965de",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "c808edbf580bfc454671cbe66e9d7c2e938e7601",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "bfe10a1d9fbccdf39f8449d62509f070d8aaaac1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "0aa7be66168b1e84b2581ffff3ccb54a6c804a1e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef",
              "lessThan": "9c9ff300e0de07475796495d86f449340d454a0c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1edd825c11f8ed2c409d6fb6b3d90a042cbf738d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4.14.63",
              "lessThan": "4.15",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "drivers/scsi/hpsa.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.16",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.86",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/scsi/hpsa.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-09T01:16:47.223",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0aa7be66168b1e84b2581ffff3ccb54a6c804a1e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9c9ff300e0de07475796495d86f449340d454a0c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bfe10a1d9fbccdf39f8449d62509f070d8aaaac1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c808edbf580bfc454671cbe66e9d7c2e938e7601",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f4d1c14e8b404766ff2bb8644bb19443d73965de",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix possible memory leak in hpsa_init_one()\n\nThe hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in\nhpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to\nclean1 directly, which frees h and leaks the h->reply_map.\n\nFix by calling hpda_free_ctlr_info() to release h->replay_map and h instead\nfree h directly."
    }
  ],
  "lastModified": "2026-06-17T05:23:55.543",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}