{
  "cveId": "CVE-2022-50770",
  "url": "https://patchblox.com/security/cve/CVE-2022-50770",
  "summary": "CVE-2022-50770 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50770, released December 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix memory leak in ocfs2_mount_volume()...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix memory leak in ocfs2_mount_volume()  There is a memory leak reported by kmemleak:    unreferenced object 0xffff88810cc65e60 (size 32):     comm \u0022mount.ocfs2\u0022, pid 23753, jiffies 4302528942 (age 34735.105s)     hex dump (first 32 bytes):       10 00 00 00 00 00 00 00 00 01 01 01 01 01 01 01  ................       01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00  ................     backtrace:       [\u003Cffffffff8170f73d\u003E] __kmalloc\u002B0x4d/0x150       [\u003Cffffffffa0ac3f51\u003E] ocfs2_compute_replay_slots\u002B0x121/0x330 [ocfs2]       [\u003Cffffffffa0b65165\u003E] ocfs2_check_volume\u002B0x485/0x900 [ocfs2]       [\u003Cffffffffa0b68129\u003E] ocfs2_mount_volume.isra.0\u002B0x1e9/0x650 [ocfs2]       [\u003Cffffffffa0b7160b\u003E] ocfs2_fill_super\u002B0xe0b/0x1740 [ocfs2]       [\u003Cffffffff818e1fe2\u003E] mount_bdev\u002B0x312/0x400       [\u003Cffffffff819a086d\u003E] legacy_get_tree\u002B0xed/0x1d0       [\u003Cffffffff818de82d\u003E] vfs_get_tree\u002B0x7d/0x230       [\u003Cffffffff81957f92\u003E] path_mount\u002B0xd62/0x1760       [\u003Cffffffff81958a5a\u003E] do_mount\u002B0xca/0xe0       [\u003Cffffffff81958d3c\u003E] __x64_sys_mount\u002B0x12c/0x1a0       [\u003Cffffffff82f26f15\u003E] do_syscall_64\u002B0x35/0x80       [\u003Cffffffff8300006a\u003E] entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0  This call stack is related to two problems.  Firstly, the ocfs2 super uses \u0022replay_map\u0022 to trace online/offline slots, in order to recover offline slots during recovery and mount.  But when ocfs2_truncate_log_init() returns an error in ocfs2_mount_volume(), the memory of \u0022replay_map\u0022 will not be freed in error handling path.  Secondly, the memory of \u0022replay_map\u0022 will not be freed if d_make_root() returns an error in ocfs2_fill_super(). But the memory of \u0022replay_map\u0022 will be freed normally when completing recovery and mount in ocfs2_complete_mount_recovery().  Fix the first problem by adding error handling path to free \u0022replay_map\u0022 when ocfs2_truncate_log_init() fails.  And fix the second problem by calling ocfs2_free_replay_slots(osb) in the error handling path \u0022out_dismount\u0022.  In addition, since ocfs2_free_replay_slots() is static, it is necessary to remove its static attribute and declare it in header file.",
  "published": "2025-12-24T13:16:03Z",
  "severity": "",
  "epss": 0.00251,
  "epssPercentile": 0.16597,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50770",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50770",
      "released": "2025-12-24T13:16:03Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50770",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50770",
      "released": "2025-12-24T13:16:03Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50770",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50770",
      "released": "2025-12-24T13:16:03Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}