Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2022-50702— vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于设备注册失败时未释放内存，可能导致内存泄漏。

AI Predicted 4.4 Difficulty: Moderate EPSS 0.20% · P9 Updated May 13, 2026

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 10

Vendor	Product	Version Range	Status
Linux	Linux	`a3c06ae158dd6fa8336157c31d9234689d068d02< 586e6fd7d581f987f7d0d2592edf0b26397e783e`	affected
		`a3c06ae158dd6fa8336157c31d9234689d068d02< 5be953e353fe421f2983e1fd37f07fba97edbffc`	affected
		`a3c06ae158dd6fa8336157c31d9234689d068d02< 337c24d817e28dd454ca22f1063dfad20822426e`	affected
		`a3c06ae158dd6fa8336157c31d9234689d068d02< aeca7ff254843d49a8739f07f7dab1341450111d`	affected
		`5.12`	affected
		`< 5.12`	unaffected
		`5.15.87≤ 5.15.*`	unaffected
		`6.0.19≤ 6.0.*`	unaffected
… +2 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-50702

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in vdpasim_net_init() or vdpasim_blk_init(), but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). (vdpa_sim_net) unreferenced object 0xffff88807eebc370 (size 16): comm "modprobe", pid 3848, jiffies 4362982860 (age 18.153s) hex dump (first 16 bytes): 76 64 70 61 73 69 6d 5f 6e 65 74 00 6b 6b 6b a5 vdpasim_net.kkk. backtrace: [<ffffffff8174f19e>] __kmalloc_node_track_caller+0x4e/0x150 [<ffffffff81731d53>] kstrdup+0x33/0x60 [<ffffffff83a5d421>] kobject_set_name_vargs+0x41/0x110 [<ffffffff82d87aab>] dev_set_name+0xab/0xe0 [<ffffffff82d91a23>] device_add+0xe3/0x1a80 [<ffffffffa0270013>] 0xffffffffa0270013 [<ffffffff81001c27>] do_one_initcall+0x87/0x2e0 [<ffffffff813739cb>] do_init_module+0x1ab/0x640 [<ffffffff81379d20>] load_module+0x5d00/0x77f0 [<ffffffff8137bc40>] __do_sys_finit_module+0x110/0x1b0 [<ffffffff83c4d505>] do_syscall_64+0x35/0x80 [<ffffffff83e0006a>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 (vdpa_sim_blk) unreferenced object 0xffff8881070c1250 (size 16): comm "modprobe", pid 6844, jiffies 4364069319 (age 17.572s) hex dump (first 16 bytes): 76 64 70 61 73 69 6d 5f 62 6c 6b 00 6b 6b 6b a5 vdpasim_blk.kkk. backtrace: [<ffffffff8174f19e>] __kmalloc_node_track_caller+0x4e/0x150 [<ffffffff81731d53>] kstrdup+0x33/0x60 [<ffffffff83a5d421>] kobject_set_name_vargs+0x41/0x110 [<ffffffff82d87aab>] dev_set_name+0xab/0xe0 [<ffffffff82d91a23>] device_add+0xe3/0x1a80 [<ffffffffa0220013>] 0xffffffffa0220013 [<ffffffff81001c27>] do_one_initcall+0x87/0x2e0 [<ffffffff813739cb>] do_init_module+0x1ab/0x640 [<ffffffff81379d20>] load_module+0x5d00/0x77f0 [<ffffffff8137bc40>] __do_sys_finit_module+0x110/0x1b0 [<ffffffff83c4d505>] do_syscall_64+0x35/0x80 [<ffffffff83e0006a>] entry_SYSCALL_64_after_hwframe+0x46/0xb0

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于设备注册失败时未释放内存，可能导致内存泄漏。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	a3c06ae158dd6fa8336157c31d9234689d068d02 ~ 586e6fd7d581f987f7d0d2592edf0b26397e783e	-
Linux	Linux	5.12	-

II. Public POCs for CVE-2022-50702

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2022-50702

请登录查看更多情报信息。

Other References for CVE-2022-50702 (1)

https://git.kernel.org/stable/c/aeca7ff254843d49a8739f07f7dab1341450111d

https://www.cve.org/CVERecord?id=CVE-2022-50702

Same Patch Batch · Linux · 2025-12-24 · 322 CVEs total

CVE-2025-68741	9.8 CRITICAL	scsi: qla2xxx: Fix improper freeing of purex item
CVE-2025-68745	9.8 CRITICAL	scsi: qla2xxx: Clear cmds after chip reset
CVE-2022-50717	9.8 CRITICAL	nvmet-tcp: add bounds check on Transfer Tag
CVE-2023-54090	9.8 CRITICAL	ixgbe: Fix panic during XDP_TX with > 64 CPUs
CVE-2023-54094	9.8 CRITICAL	net: prevent skb corruption on frag list segmentation
CVE-2023-53867	9.8 CRITICAL	ceph: fix potential use-after-free bug when trimming caps
CVE-2025-68359	9.8 CRITICAL	btrfs: fix double free of qgroup record after failure to add delayed ref head
CVE-2025-68726	9.8 CRITICAL	crypto: aead - Fix reqsize handling
CVE-2023-54076	9.8 CRITICAL	smb: client: fix missed ses refcounting
CVE-2023-53996	9.3 CRITICAL	x86/sev: Make enc_dec_hypercall() accept a size instead of npages
CVE-2023-54071	8.8 HIGH	wifi: rtw88: use work to update rate to avoid RCU warning
CVE-2025-68736	8.8 HIGH	landlock: Fix handling of disconnected directories
CVE-2023-54040	8.8 HIGH	ice: fix wrong fallback logic for FDIR
CVE-2023-54092	8.8 HIGH	KVM: s390: pv: fix index value of replaced ASCE
CVE-2022-50732	8.8 HIGH	staging: rtl8192u: Fix use after free in ieee80211_rx()
CVE-2023-54043	8.8 HIGH	iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
CVE-2023-54120	8.8 HIGH	Bluetooth: Fix race condition in hidp_session_thread
CVE-2023-54060	8.8 HIGH	iommufd: Set end correctly when doing batch carry
CVE-2023-53986	8.6 HIGH	mips: bmips: BCM6358: disable RAC flush for TP1
CVE-2022-50746	8.4 HIGH	erofs: validate the extent length for uncompressed pclusters

Showing top 20 of 322 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux

V. Comments for CVE-2022-50702

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2022-50702— vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 10

I. Basic Information for CVE-2022-50702

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2022-50702

III. Intelligence Information for CVE-2022-50702

Other References for CVE-2022-50702 (1)

Same Patch Batch · Linux · 2025-12-24 · 322 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2022-50702

Leave a comment