Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-50170: Linux kernel can lose memory during test suite failure
CVE-2022-50170 · published 1 year ago
Summary
The Linux kernel's built-in test framework may forget to free some memory when a test setup fails. This can cause a small amount of memory to be wasted, which could affect system stability if it happens repeatedly. Updating to the latest kernel version that includes the fix will prevent the leak.
What to do
- Update linux kernel to version 5.19.2.
- Update debian linux to version 6.0.2-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.17.14, < 5.18 >= 5.18.3, < 5.18.18 >= 5.19, < 5.19.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Linux | linux | kernel |
>= 5.19.0, < 5.19.2 Fix: upgrade to 5.19.2
|
| Debian:12 | debian | linux |
< 6.0.2-1 Fix: upgrade to 6.0.2-1
|
Original advisory text
kunit: executor: Fix a memory leak on failure in kunit_filter_tests
In the Linux kernel, the following vulnerability has been resolved: kunit: executor: Fix a memory leak on failure in kunit_filter_tests It's possible that memory allocation for 'filtered' will fail, but for the copy of the suite to succeed. In this case, the copy could be leaked. Properly free 'copy' in the error case for the allocation of 'filtered' failing. Note that there may also have been a similar issue in kunit_filter_subsuites, before it was removed in "kunit: flatten kunit_suite*** to kunit_suite** in .kunit_test_suites". This was reported by clang-analyzer via the kernel test robot, here: https://lore.kernel.org/all/[email protected]/ And by smatch via Dan Carpenter and the kernel test robot: https://lore.kernel.org/all/[email protected]/
References
- https://git.kernel.org/stable/c/7d69764fa3442c7615a75c6b5c02eaa1f274bccf URL
- https://git.kernel.org/stable/c/94681e289bf5d10c9db9db143d1a22d8717205c5 URL
- https://git.kernel.org/stable/c/a8a7e3ced362b88b659ab54239990196ff975982 URL
- https://security-tracker.debian.org/tracker/CVE-2022-50170 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50170... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-50170 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-401Memory Leak
Timeline
Published18 Jun 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta