Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2022-50577: Linux kernel may waste memory during file checks
CVE-2022-50577 · published 1 year ago
Summary
The Linux kernel can inadvertently allocate memory when it tries to record or audit files, even if it cannot calculate the file’s checksum. This can cause unnecessary memory use, which over time may affect system performance. Updating the kernel to the latest version removes the stray allocation and prevents the memory waste.
What to do
- Update debian linux to version 6.1.4-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | linux |
< 6.1.4-1 Fix: upgrade to 6.1.4-1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: ima: Fix memory leak in __ima_inode_hash() Commit f3cc6b25dcc5 ("ima: always measure and audit files in policy") lets measureme...
In the Linux kernel, the following vulnerability has been resolved: ima: Fix memory leak in __ima_inode_hash() Commit f3cc6b25dcc5 ("ima: always measure and audit files in policy") lets measurement or audit happen even if the file digest cannot be calculated. As a result, iint->ima_hash could have been allocated despite ima_collect_measurement() returning an error. Since ima_hash belongs to a temporary inode metadata structure, declared at the beginning of __ima_inode_hash(), just add a kfree() call if ima_collect_measurement() returns an error different from -ENOMEM (in that case, ima_hash should not have been allocated).
References
Timeline
Published22 Oct 2025
Updated29 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta