Riskcovery

CVE-2022-50420

crypto: hisilicon/hpre - fix resource leak in remove process

State
Published
Severity
5.5 Medium
Published
Oct 1, 2025
Updated
Aug 15, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/hpre - fix resource leak in remove process

In hpre_remove(), when the disable operation of qm sriov failed, the following logic should continue to be executed to release the remaining resources that have been allocated, instead of returning directly, otherwise there will be resource leakage.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 5ec302a364bfd95be29a9784b2fabd8e2ddf0476 to before 2b3e3ecdb402ff1053ee25b598ff21b9ddf4384fAffected
  • 5ec302a364bfd95be29a9784b2fabd8e2ddf0476 to before 4e0de941d252d4e7c985981e78480c8d6f020b64Affected
  • 5ec302a364bfd95be29a9784b2fabd8e2ddf0476 to before cb873c93a7ad27681920bf062ef052fca1e8d5b1Affected
  • 5ec302a364bfd95be29a9784b2fabd8e2ddf0476 to before 45e6319bd5f2154d8b8c9f1eaa4ac030ba0d330cAffected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.