CVE-2022-50284

MEDIUM

Linux Kernel 5.19-6.2 - Use-After-Free in init_mqueue_fs()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ipc: fix memory leak in init_mqueue_fs() When setup_mq_sysctls() failed in init_mqueue_fs(), mqueue_inode_cachep is not released. In order to fix this issue, the release path is reordered.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/86273624a68d07f129dc182b8394f487ed4de484

Patch

https://git.kernel.org/stable/c/28dad915abe46d38c5799a0c8130e9a2a1540385

Patch

https://git.kernel.org/stable/c/12b677f2c697d61e5ddbcb6c1650050a39392f54

Scores

CVSS v3 5.5

EPSS 0.0014

EPSS Percentile 3.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (11)

linux/Kernel 5.19.0 - 6.0.16linux

linux/Kernel 6.1.0 - 6.1.2linux

Linux/Linux < 5.19

Linux/Linux 5.19

Linux/Linux 6.0.16 - 6.0.*

Linux/Linux 6.1.2 - 6.1.*

Linux/Linux 6.2

Linux/Linux dc55e35f9e810f23dd69cfdc91a3d636023f57a2 - 12b677f2c697d61e5ddbcb6c1650050a39392f54

Linux/Linux dc55e35f9e810f23dd69cfdc91a3d636023f57a2 - 28dad915abe46d38c5799a0c8130e9a2a1540385

Linux/Linux dc55e35f9e810f23dd69cfdc91a3d636023f57a2 - 86273624a68d07f129dc182b8394f487ed4de484

... and 1 more

Published Sep 15, 2025

Tracked Since Feb 18, 2026