CVE-2022-50707: Linux
EPSS: 0.2% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() 'vc_ctrl_req' is alloced in virtio_crypto_alg_skcipher_close_session(), and should be freed in the invalid ctrl_status->status error handling case. Otherwise there is a memory leak.
Affected products
- Linux Linux: from 5.19, before 6.0.19 (fixed in 6.0.19); from 6.1, before 6.1.5 (fixed in 6.1.5)
Published 2025-12-24. Last modified 2026-06-17.