CVE-2022-50646

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linuxf4d1c14e8b404766ff2bb8644bb19443d73965de, f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, c808edbf580bfc454671cbe66e9d7c2e938e7601, bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 9c9ff300e0de07475796495d86f449340d454a0c, 4.15 or later

Affected products

ProductAffected versionsFixed in
Linux Linux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < f4d1c14e8b404766ff2bb8644bb19443d73965de, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < c808edbf580bfc454671cbe66e9d7c2e938e7601, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < 9c9ff300e0de07475796495d86f449340d454a0c, 1edd825c11f8ed2c409d6fb6b3d90a042cbf738d, 4.14.63 ≤ v < 4.15, 4.16f4d1c14e8b404766ff2bb8644bb19443d73965de, f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, c808edbf580bfc454671cbe66e9d7c2e938e7601, bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 9c9ff300e0de07475796495d86f449340d454a0c, 4.15

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.