{
  "cveId": "CVE-2022-50779",
  "url": "https://patchblox.com/security/cve/CVE-2022-50779",
  "summary": "CVE-2022-50779 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50779, released December 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  orangefs: Fix kmemleak in orangefs_prepare_debug...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()  When insert and remove the orangefs module, then debug_help_string will be leaked:    unreferenced object 0xffff8881652ba000 (size 4096):     comm \u0022insmod\u0022, pid 1701, jiffies 4294893639 (age 13218.530s)     hex dump (first 32 bytes):       43 6c 69 65 6e 74 20 44 65 62 75 67 20 4b 65 79  Client Debug Key       77 6f 72 64 73 20 61 72 65 20 75 6e 6b 6e 6f 77  words are unknow     backtrace:       [\u003C0000000004e6f8e3\u003E] kmalloc_trace\u002B0x27/0xa0       [\u003C0000000006f75d85\u003E] orangefs_prepare_debugfs_help_string\u002B0x5e/0x480 [orangefs]       [\u003C0000000091270a2a\u003E] _sub_I_65535_1\u002B0x57/0xf70 [crc_itu_t]       [\u003C000000004b1ee1a3\u003E] do_one_initcall\u002B0x87/0x2a0       [\u003C000000001d0614ae\u003E] do_init_module\u002B0xdf/0x320       [\u003C00000000efef068c\u003E] load_module\u002B0x2f98/0x3330       [\u003C000000006533b44d\u003E] __do_sys_finit_module\u002B0x113/0x1b0       [\u003C00000000a0da6f99\u003E] do_syscall_64\u002B0x35/0x80       [\u003C000000007790b19b\u003E] entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0  When remove the module, should always free debug_help_string. Should always free the allocated buffer when change the free_debug_help_string.",
  "published": "2025-12-24T13:16:04Z",
  "severity": "",
  "epss": 0.00302,
  "epssPercentile": 0.23073,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50779",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50779",
      "released": "2025-12-24T13:16:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50779",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50779",
      "released": "2025-12-24T13:16:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50779",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50779",
      "released": "2025-12-24T13:16:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}