Vulnerability in Linux

CVE-2022-50761

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(), if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead to a memory leak issue, fix it.

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 2d9e1e2f58b5612aa4eab0ab54c84308a29dbd79, 2.6.27, 0

References