What’s Vulnerable › Vulnerabilities

CVE-2022-50025: cxl: Fix a memory leak in an error handling path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmap_zalloc() must be balanced by a corresponding bitmap_free() in the error handling path of afu_allocate_irqs().

Affected products

• Linux kernel: from 3.19 before 4.9.326; from 4.10 before 4.14.291; from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.138; from 5.11 before 5.15.63 — fixed in 4.14.291, 4.19.256, 4.9.326, 5.10.138, 5.15.63, 5.19.4

How to fix

Upgrade to a fixed version: Linux kernel 4.14.291, 4.19.256, 4.9.326, 5.10.138. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3a15b45b5454da862376b5d69a4967f5c6fa1368
• https://git.kernel.org/stable/c/4be138bcd6d68cec0ce47051b117541061f5141a
• https://git.kernel.org/stable/c/6544ff559315498ad6c0a311359ca44987f9ca07
• https://git.kernel.org/stable/c/695af60af755873399ce01cb97176768828bc1fd
• https://git.kernel.org/stable/c/89d51dc6878c47b6400922fac21b6a33f9d1a588
• https://git.kernel.org/stable/c/addff638c41753639368c252d0c5ba0d8fe9ed97
• https://git.kernel.org/stable/c/c2557780ee7818b701681c226fa4cb7c0b171665
• https://git.kernel.org/stable/c/c2c7a29f99788e9e5dfe41d16868ea33da7cc235

Get alerted when CVE-2022-50025 or the next vulnerability affects your stack