{"id":"CVE-2022-50376","title":"In the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n\nWhen insert and remove the orangefs module, there are memory leaked\nas below:\n\nunreferenced object 0xff…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n\nWhen insert and remove the orangefs module, there are memory leaked\nas below:\n\nunreferenced object 0xff…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401","CWE-401"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.6, < 5.4.229","linux_kernel >= 5.5, < 5.10.163","linux_kernel >= 5.11, < 5.15.86","linux_kernel >= 5.16, < 6.0.16","linux_kernel >= 6.1, < 6.1.2"],"patched":["linux_kernel 6.1.2"],"published":"2025-09-18","updated":"2026-08-15","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-50376","references":[{"url":"https://git.kernel.org/stable/c/0cd303aad220fafa595e0ed593e99aa51b90412b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/31720a2b109b3080eb77e97b8f6f50a27b4ae599","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/786e5296f9e3b045d5ff9098514ce7b8ba1d890d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a076490b0211990ec6764328c22cb744dd782bd9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/bdc2d33fa2324b1f5ab5b701cda45ee0b2384409","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c8853267289c55b1acbe4dc3641374887584834d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00156,"epssPercentile":0.05151,"ingestedAt":"2026-08-15T13:26:45.587Z","slug":"CVE-2022-50376","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n\nWhen insert and remove the orangefs module, there are memory leaked\nas below:\n\nunreferenced object 0xffff88816b0cc000 (size 2048):\n  comm \"insmod\", pid 783, jiffies 4294813439 (age 65.512s)\n  hex dump (first 32 bytes):\n    6e 6f 6e 65 0a 00 00 00 00 00 00 00 00 00 00 00  none............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0\n    [<000000005b405fee>] orangefs_debugfs_init.cold+0xaf/0x17f\n    [<00000000e5a0085b>] 0xffffffffa02780f9\n    [<000000004232d9f7>] do_one_initcall+0x87/0x2a0\n    [<0000000054f22384>] do_init_module+0xdf/0x320\n    [<000000003263bdea>] load_module+0x2f98/0x3330\n    [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0\n    [<00000000250ae02b>] do_syscall_64+0x35/0x80\n    [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nUse the golbal variable as the buffer rather than dynamic allocate to\nslove the problem.\n\n## Affected\n\n- `linux_kernel >= 4.6, < 5.4.229`\n- `linux_kernel >= 5.5, < 5.10.163`\n- `linux_kernel >= 5.11, < 5.15.86`\n- `linux_kernel >= 5.16, < 6.0.16`\n- `linux_kernel >= 6.1, < 6.1.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.1.2`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}