What’s Vulnerable › Vulnerabilities

CVE-2022-50438: net: hinic: fix memory leak when reading function table

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinic_dbg_get_func_table(), read_data is not released. Fix it.

Affected products

• Linux kernel: from 5.10 before 5.10.153; from 5.11 before 5.15.77; from 5.16 before 6.0.7; 6.1-rc1, 6.1-rc2 — fixed in 5.10.153, 5.15.77, 6.0.7

How to fix

Upgrade to a fixed version: Linux kernel 5.10.153, 5.15.77, 6.0.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4c1f602df8956bc0decdafd7e4fc7eef50c550b1
• https://git.kernel.org/stable/c/bb01910763f935b16538084b4269696e0de17f79
• https://git.kernel.org/stable/c/e6765fe8de372a84f8dbe9e03ec13c7c70f946b8
• https://git.kernel.org/stable/c/ee98ab337036c983239aa550850861c88a5c4262

Get alerted when CVE-2022-50438 or the next vulnerability affects your stack