CVE-2022-50025

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmap_zalloc() must be balanced by a corresponding bitmap_free() in the error handling path of afu_allocate_irqs().

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < c2c7a29f99788e9e5dfe41d16868ea33da7cc235
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 6544ff559315498ad6c0a311359ca44987f9ca07
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 89d51dc6878c47b6400922fac21b6a33f9d1a588
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 695af60af755873399ce01cb97176768828bc1fd
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 4be138bcd6d68cec0ce47051b117541061f5141a
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < addff638c41753639368c252d0c5ba0d8fe9ed97
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < c2557780ee7818b701681c226fa4cb7c0b171665
Linux Linux 80fa93fce37d3490f4bb0da8a5b239a6745bc744 < 3a15b45b5454da862376b5d69a4967f5c6fa1368
Linux Linux 3.19
linux linux_kernel 3.19 – 4.9.326

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.2%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →