CVE-2022-50765
Estado: AplazadaSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: kexec: Fix memory leak of elf header buffer
This is reported by kmemleak detector:
In elf_kexec_load(), a buffer is allocated via vzalloc() to store elf headers. While it's not freed back to system when kdump kernel is reloaded or unloaded, or when image->elf_header is successfully set and then fails to load kdump kernel for some reason. Fix it by freeing the buffer in arch_kimage_file_post_load_cleanup().
Detalles técnicos trazas, registros y código del informe original
unreferenced object 0xff2000000403d000 (size 4096):
comm "kexec", pid 146, jiffies 4294900633 (age 64.792s)
hex dump (first 32 bytes):
7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 .ELF............
04 00 f3 00 01 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<00000000566ca97c>] kmemleak_vmalloc+0x3c/0xbe
[<00000000979283d8>] __vmalloc_node_range+0x3ac/0x560
[<00000000b4b3712a>] __vmalloc_node+0x56/0x62
[<00000000854f75e2>] vzalloc+0x2c/0x34
[<00000000e9a00db9>] crash_prepare_elf64_headers+0x80/0x30c
[<0000000067e8bf48>] elf_kexec_load+0x3e8/0x4ec
[<0000000036548e09>] kexec_image_load_default+0x40/0x4c
[<0000000079fbe1b4>] sys_kexec_file_load+0x1c4/0x322
[<0000000040c62c03>] ret_from_syscall+0x0/0x2CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.24%
- Percentil entre todas las CVEs puntuadas: 13
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-50765",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "8acea455fafaf2620b247de6c00774828b618a82",
"lessThan": "090bfcfc9f14d05154893c67eeaecc56e894fbae",
"versionType": "git"
},
{
"status": "affected",
"version": "8acea455fafaf2620b247de6c00774828b618a82",
"lessThan": "cdea2da6787583ecca43594132533a2ac8d7cd21",
"versionType": "git"
},
{
"status": "affected",
"version": "8acea455fafaf2620b247de6c00774828b618a82",
"lessThan": "cbc32023ddbdf4baa3d9dc513a2184a84080a5a2",
"versionType": "git"
}
],
"programFiles": [
"arch/riscv/kernel/elf_kexec.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.0.18",
"versionType": "semver",
"lessThanOrEqual": "6.0.*"
},
{
"status": "unaffected",
"version": "6.1.4",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/riscv/kernel/elf_kexec.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-24T13:16:03.297",
"references": [
{
"url": "https://git.kernel.org/stable/c/090bfcfc9f14d05154893c67eeaecc56e894fbae",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cbc32023ddbdf4baa3d9dc513a2184a84080a5a2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cdea2da6787583ecca43594132533a2ac8d7cd21",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: kexec: Fix memory leak of elf header buffer\n\nThis is reported by kmemleak detector:\n\nunreferenced object 0xff2000000403d000 (size 4096):\n comm \"kexec\", pid 146, jiffies 4294900633 (age 64.792s)\n hex dump (first 32 bytes):\n 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 .ELF............\n 04 00 f3 00 01 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<00000000566ca97c>] kmemleak_vmalloc+0x3c/0xbe\n [<00000000979283d8>] __vmalloc_node_range+0x3ac/0x560\n [<00000000b4b3712a>] __vmalloc_node+0x56/0x62\n [<00000000854f75e2>] vzalloc+0x2c/0x34\n [<00000000e9a00db9>] crash_prepare_elf64_headers+0x80/0x30c\n [<0000000067e8bf48>] elf_kexec_load+0x3e8/0x4ec\n [<0000000036548e09>] kexec_image_load_default+0x40/0x4c\n [<0000000079fbe1b4>] sys_kexec_file_load+0x1c4/0x322\n [<0000000040c62c03>] ret_from_syscall+0x0/0x2\n\nIn elf_kexec_load(), a buffer is allocated via vzalloc() to store elf\nheaders. While it's not freed back to system when kdump kernel is\nreloaded or unloaded, or when image->elf_header is successfully set and\nthen fails to load kdump kernel for some reason. Fix it by freeing the\nbuffer in arch_kimage_file_post_load_cleanup()."
}
],
"lastModified": "2026-06-17T05:24:08.387",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}