{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2022-50342", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-50342", "idYear": 2022, "status": "PUBLISHED", "publishedAt": "2025-09-16T16:11:21.665Z", "updatedAt": "2026-05-11T19:17:34.790Z", "importedAt": "2026-10-24T01:56:49.724Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "floppy: Fix memory leak in do_floppy_init()", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfloppy: Fix memory leak in do_floppy_init()\n\nA memory leak was reported when floppy_alloc_disk() failed in\ndo_floppy_init().\n\nunreferenced object 0xffff888115ed25a0 (size 8):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 8 bytes):\n 00 ac 67 5b 81 88 ff ff ..g[....\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<00000000a87bfa9e>] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180\n [<000000006f02e8b1>] blk_mq_alloc_tag_set+0x573/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\nunreferenced object 0xffff88810fc30540 (size 32):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<000000006b91eab4>] blk_mq_alloc_tag_set+0x393/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nIf the floppy_alloc_disk() failed, disks of current drive will not be set,\nthus the lastest allocated set->tag cannot be freed in the error handling\npath. A simple call graph shown as below:\n\n floppy_module_init()\n floppy_init()\n do_floppy_init()\n for (drive = 0; drive < N_DRIVE; drive++)\n blk_mq_alloc_tag_set()\n blk_mq_alloc_tag_set_tags()\n blk_mq_realloc_tag_set_tags() # set->tag allocated\n floppy_alloc_disk()\n blk_mq_alloc_disk() # error occurred, disks failed to allocated\n\n ->out_put_disk:\n for (drive = 0; drive < N_DRIVE; drive++)\n if (!disks[drive][0]) # the last disks is not set and loop break\n break;\n blk_mq_free_tag_set() # the latest allocated set->tag leaked\n\nFix this problem by free the set->tag of current drive before jump to\nerror handling path.\n\n[efremov: added stable list, changed title]", "affected": [ { "vendor": "Linux", "product": "Linux", "defaultStatus": "unaffected", "versions": [ { "version": "302cfee150291c6cd85b1ca197d062d0b423d09c", "status": "affected", "versionType": "git", "lessThan": "f36d8c8651506aea5f09899f5356ece5d1384f50" }, { "version": "302cfee150291c6cd85b1ca197d062d0b423d09c", "status": "affected", "versionType": "git", "lessThan": "75d8c8851a4da0190c2480e84315b5fd3d0356c5" }, { "version": "302cfee150291c6cd85b1ca197d062d0b423d09c", "status": "affected", "versionType": "git", "lessThan": "55b3c66a0d441cd37154ae95e44d0b82ccfd580e" }, { "version": "302cfee150291c6cd85b1ca197d062d0b423d09c", "status": "affected", "versionType": "git", "lessThan": "f8ace2e304c5dd8a7328db9cd2b8a4b1b98d83ec" } ] }, { "vendor": "Linux", "product": "Linux", "defaultStatus": "affected", "versions": [ { "version": "5.11", "status": "affected" }, { "version": "0", "status": "unaffected", "versionType": "semver", "lessThan": "5.11" }, { "version": "5.15.86", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.15.*" }, { "version": "6.0.16", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "6.0.*" }, { "version": "6.1.2", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "6.1.*" }, { "version": "6.2", "status": "unaffected", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*" } ] } ] } } }