Riskcovery

CVE-2022-50387

net: hinic: fix the issue of CMDQ memory leaks

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hinic: fix the issue of CMDQ memory leaks

When hinic_set_cmdq_depth() fails in hinic_init_cmdqs(), the cmdq memory is not released correctly. Fix it.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 72ef908bb3ff9261dc38d079ef332c91418f8693 to before 6603843c80b16957f5d7d14d897faf13cef2b8b9Affected
  • 72ef908bb3ff9261dc38d079ef332c91418f8693 to before 6016d96a6adf66d61655d85da02e1a4c1deccbd6Affected
  • 72ef908bb3ff9261dc38d079ef332c91418f8693 to before 9145d512ddff76df88832b29575488199df544a1Affected
  • 72ef908bb3ff9261dc38d079ef332c91418f8693 to before 363cc87767f6ddcfb9158ad2e2afa2f8d5c4b94eAffected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.153 through 5.10.*Not affected
  • 5.15.77 through 5.15.*Not affected
  • 6.0.7 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.