What’s Vulnerable › Vulnerabilities

CVE-2022-50420: crypto: hisilicon/hpre - fix resource leak in remove process

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-08-15
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre - fix resource leak in remove process In hpre_remove(), when the disable operation of qm sriov failed, the following logic should continue to be executed to release the remaining resources that have been allocated, instead of returning directly, otherwise there will be resource leakage.

Affected products

• Linux kernel: from 5.5 before 5.15.86; from 5.16 before 6.0.16; from 6.1 before 6.1.2 — fixed in 5.15.86, 6.0.16, 6.1.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.86, 6.0.16, 6.1.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2b3e3ecdb402ff1053ee25b598ff21b9ddf4384f
• https://git.kernel.org/stable/c/45e6319bd5f2154d8b8c9f1eaa4ac030ba0d330c
• https://git.kernel.org/stable/c/4e0de941d252d4e7c985981e78480c8d6f020b64
• https://git.kernel.org/stable/c/cb873c93a7ad27681920bf062ef052fca1e8d5b1

Get alerted when CVE-2022-50420 or the next vulnerability affects your stack