CVE-2022-50646: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2022-50646DEBIAN-CVE-2022-50646
Published 09-12-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2022-50646 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 9.9% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 7
SUSE-SU-2026:0263-1SUSE-SU-2026:0316-1SUSE-SU-2026:0317-1SUSE-SU-2026:0350-1SUSE-SU-2026:0369-1SUSE-SU-2026:0411-1

Timeline

  1. 09-12-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu120 products
  • linux< 4.15.0-208.220 | < 5.4.0-144.161 | < 5.15.0-69.76
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.15.0-1153.166 | < 5.4.0-1097.105 | < 5.15.0-1033.37
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.4-1
Linux1 product
  • linux≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < f4d1c14e8b404766ff2bb8644bb19443d73965de | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < c808edbf580bfc454671cbe66e9d7c2e938e7601 | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < bfe10a1d9fbccdf39f8449d62509f070d8aaaac1 | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507 | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e | ≥ 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef, < 9c9ff300e0de07475796495d86f449340d454a0c | 1edd825c11f8ed2c409d6fb6b3d90a042cbf738d | ≥ 4.14.63, < 4.15 | 4.16

3 vendors · 122 products

References

11 links
Show all 11 references