CVE-2022-50779
Memory Leak in Linux Kernel OrangeFS Module on Insert/Remove
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| orangefs | orangefs | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's orangefs module. Specifically, when the orangefs module is inserted and removed, a debug_help_string buffer is allocated but not properly freed, causing a memory leak. The issue occurs in the function orangefs_prepare_debugfs_help_string(), where the allocated memory is not released upon module removal.
How can this vulnerability impact me? :
The impact of this vulnerability is a memory leak in the kernel when the orangefs module is inserted and removed. Over time, repeated insertions and removals could lead to increased memory usage and potentially degrade system performance or stability due to unreleased memory.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that the orangefs module is updated to a version where the fix for kmemleak in orangefs_prepare_debugfs_help_string() is applied. Avoid inserting and removing the orangefs module repeatedly until the fix is applied, as the debug_help_string buffer is leaked on module removal. Applying the patch or updating the kernel to a version including this fix will prevent the memory leak.