{"schema_version":"1.9.0","id":"CVE-2022-50376","published":"2025-09-18T13:32:59.110Z","modified":"2026-08-17T03:36:28.079862043Z","related":["SUSE-SU-2025:03615-1","SUSE-SU-2025:03628-1","SUSE-SU-2025:3716-1","SUSE-SU-2025:3761-1"],"summary":"orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n\nWhen insert and remove the orangefs module, there are memory leaked\nas below:\n\nunreferenced object 0xffff88816b0cc000 (size 2048):\n  comm \"insmod\", pid 783, jiffies 4294813439 (age 65.512s)\n  hex dump (first 32 bytes):\n    6e 6f 6e 65 0a 00 00 00 00 00 00 00 00 00 00 00  none............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0\n    [<000000005b405fee>] orangefs_debugfs_init.cold+0xaf/0x17f\n    [<00000000e5a0085b>] 0xffffffffa02780f9\n    [<000000004232d9f7>] do_one_initcall+0x87/0x2a0\n    [<0000000054f22384>] do_init_module+0xdf/0x320\n    [<000000003263bdea>] load_module+0x2f98/0x3330\n    [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0\n    [<00000000250ae02b>] do_syscall_64+0x35/0x80\n    [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nUse the golbal variable as the buffer rather than dynamic allocate to\nslove the problem.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"274dcf55bd4ab12af1cc1d3b77416285bef8ebf4"},{"fixed":"bdc2d33fa2324b1f5ab5b701cda45ee0b2384409"},{"fixed":"a076490b0211990ec6764328c22cb744dd782bd9"},{"fixed":"c8853267289c55b1acbe4dc3641374887584834d"},{"fixed":"786e5296f9e3b045d5ff9098514ce7b8ba1d890d"},{"fixed":"0cd303aad220fafa595e0ed593e99aa51b90412b"},{"fixed":"31720a2b109b3080eb77e97b8f6f50a27b4ae599"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50376.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.0"},{"fixed":"5.4.229"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.163"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.86"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.0.16"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.1.2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50376.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0cd303aad220fafa595e0ed593e99aa51b90412b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/31720a2b109b3080eb77e97b8f6f50a27b4ae599"},{"type":"WEB","url":"https://git.kernel.org/stable/c/786e5296f9e3b045d5ff9098514ce7b8ba1d890d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a076490b0211990ec6764328c22cb744dd782bd9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bdc2d33fa2324b1f5ab5b701cda45ee0b2384409"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c8853267289c55b1acbe4dc3641374887584834d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50376.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50376"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50376.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}