CVE-2022-50395

integrity: Fix memory leakage in keyring allocation error path

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

integrity: Fix memory leakage in keyring allocation error path

Key restriction is allocated in integrity_init_keyring(). However, if keyring allocation failed, it is not freed, causing memory leaks.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 9b7c44885a07c5ee7f9bf3aa3c9c72fb110c8d22Affected 2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 3bd737289c26be3cee4b9afaf61ef784a2af9d6eAffected 2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 29d6c69ba4b96a1de0376e44e5f8b38b13ec8803Affected 2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 57e49ad12f8f5df0c48e1710c54b147a05a10c32Affected 2b6aa412ff23a02ac777ad307249c60a839cfd25 to before c591c48842f08d30ec6b8416757831985ed9a315Affected 2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 39419ef7af0916cc3620ecf1ed42d29659109bf3Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 9b7c44885a07c5ee7f9bf3aa3c9c72fb110c8d22Affected
2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 3bd737289c26be3cee4b9afaf61ef784a2af9d6eAffected
2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 29d6c69ba4b96a1de0376e44e5f8b38b13ec8803Affected
2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 57e49ad12f8f5df0c48e1710c54b147a05a10c32Affected
2b6aa412ff23a02ac777ad307249c60a839cfd25 to before c591c48842f08d30ec6b8416757831985ed9a315Affected
2b6aa412ff23a02ac777ad307249c60a839cfd25 to before 39419ef7af0916cc3620ecf1ed42d29659109bf3Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.