What’s Vulnerable › Vulnerabilities

CVE-2022-50512: ext4: fix potential memory leak in ext4_fc_record_regions()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential memory leak in ext4_fc_record_regions() As krealloc may return NULL, in this case 'state->fc_regions' may not be freed by krealloc, but 'state->fc_regions' already set NULL. Then will lead to 'state->fc_regions' memory leak.

Affected products

• Linux kernel: from 5.10 before 5.10.150; from 5.11 before 5.15.75; from 5.16 before 5.19.17; from 6.0 before 6.0.3 — fixed in 5.10.150, 5.15.75, 5.19.17, 6.0.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.150, 5.15.75, 5.19.17, 6.0.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2cfb769d60a2a57eb3566765428b6131cd16dcfe
• https://git.kernel.org/stable/c/417b0455a0b6d0f60a2930592731d1f8340e24be
• https://git.kernel.org/stable/c/518566e71ad86b7c2f1bf6d9caee9588bb7ac158
• https://git.kernel.org/stable/c/7069d105c1f15c442b68af43f7fde784f3126739
• https://git.kernel.org/stable/c/a4058b869e6c5e517c79e30532a350d0f3115c3e

Get alerted when CVE-2022-50512 or the next vulnerability affects your stack