SB2025121030 - Memory leak in Linux kernel misc ocxl driver
Published: December 10, 2025 Updated: December 12, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2022-50669)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the ocxl_file_register_afu() function in drivers/misc/ocxl/file.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0cd05062371a49774e8a45258bdedf0bd6d3d327
- https://git.kernel.org/stable/c/2fce8b3583d1641a1716486f408478b58e96ec91
- https://git.kernel.org/stable/c/3299983a6bf628249ac650908e62d12de959341e
- https://git.kernel.org/stable/c/557b7de055d1e230ddb6664c29d26917b8db9143
- https://git.kernel.org/stable/c/7525741cb302a1672b8c3a5edb2a08e4229b5c7c
- https://git.kernel.org/stable/c/a4cb1004aeed2ab893a058fad00a5b41a12c4691
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.163
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.229
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.16
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2