Unrated severityNVD Advisory· Published Oct 22, 2025· Updated Apr 15, 2026
CVE-2022-50577
CVE-2022-50577
Description
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix memory leak in __ima_inode_hash()
Commit f3cc6b25dcc5 ("ima: always measure and audit files in policy") lets measurement or audit happen even if the file digest cannot be calculated.
As a result, iint->ima_hash could have been allocated despite ima_collect_measurement() returning an error.
Since ima_hash belongs to a temporary inode metadata structure, declared at the beginning of __ima_inode_hash(), just add a kfree() call if ima_collect_measurement() returns an error different from -ENOMEM (in that case, ima_hash should not have been allocated).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
37- osv-coords36 versionspkg:linux/kernelpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP5_Update_32&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
>= 5.18.0, < 6.0.18+ 35 more
- (no CPE)range: >= 5.18.0, < 6.0.18
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1.150500.6.61.1
- (no CPE)range: < 5.14.21-150500.55.127.1.150500.6.61.1
- (no CPE)range: < 5.14.21-150500.55.127.1.150500.6.61.1
- (no CPE)range: < 5.14.21-150500.55.127.1.150500.6.61.1
- (no CPE)range: < 5.14.21-150500.55.127.1.150500.6.61.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 1-150500.11.3.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.13.112.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.13.112.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
- (no CPE)range: < 5.14.21-150500.55.127.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.