CVE-2022-50391: mm/mempolicy: fix memory leak in set_mempolicy_home_node system call
In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix memory leak in setmempolicyhomenode system call
When encountering any vma in the range with policy other than MPOLBIND or MPOLPREFERREDMANY, an error is returned without issuing a mpolput on the policy just allocated with mpoldup().
This allows arbitrary users to leak kernel memory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50391?
CVE-2022-50391 has been assigned a medium severity rating due to the potential for memory leaks in the Linux kernel.
How do I fix CVE-2022-50391?
To resolve CVE-2022-50391, it's recommended to update to a patched version of the Linux kernel that addresses this vulnerability.
What does CVE-2022-50391 affect?
CVE-2022-50391 affects the Linux kernel, specifically in the handling of memory policies.
What are the implications of CVE-2022-50391?
The implications of CVE-2022-50391 include potential memory leaks which could lead to system instability or performance degradation.
Is CVE-2022-50391 being actively exploited?
As of the last reports, there have been no known active exploits for CVE-2022-50391, but it's wise to apply security updates promptly.