{
  "cveId": "CVE-2022-50376",
  "url": "https://patchblox.com/security/cve/CVE-2022-50376",
  "summary": "CVE-2022-50376 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50376, released September 18, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  orangefs: Fix kmemleak in orangefs_{kernel,clien...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()  When insert and remove the orangefs module, there are memory leaked as below:  unreferenced object 0xffff88816b0cc000 (size 2048):   comm \u0022insmod\u0022, pid 783, jiffies 4294813439 (age 65.512s)   hex dump (first 32 bytes):     6e 6f 6e 65 0a 00 00 00 00 00 00 00 00 00 00 00  none............     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003C0000000031ab7788\u003E] kmalloc_trace\u002B0x27/0xa0     [\u003C000000005b405fee\u003E] orangefs_debugfs_init.cold\u002B0xaf/0x17f     [\u003C00000000e5a0085b\u003E] 0xffffffffa02780f9     [\u003C000000004232d9f7\u003E] do_one_initcall\u002B0x87/0x2a0     [\u003C0000000054f22384\u003E] do_init_module\u002B0xdf/0x320     [\u003C000000003263bdea\u003E] load_module\u002B0x2f98/0x3330     [\u003C0000000052cd4153\u003E] __do_sys_finit_module\u002B0x113/0x1b0     [\u003C00000000250ae02b\u003E] do_syscall_64\u002B0x35/0x80     [\u003C00000000f11c03c7\u003E] entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0  Use the golbal variable as the buffer rather than dynamic allocate to slove the problem.",
  "published": "2025-09-18T14:15:36Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00161,
  "epssPercentile": 0.0531,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50376",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50376",
      "released": "2025-09-18T14:15:36Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50376",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50376",
      "released": "2025-09-18T14:15:36Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50376",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50376",
      "released": "2025-09-18T14:15:36Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}