Not yet scoredPublished Dec 8, 2025

CVE-2022-50646scsi: hpsa: Fix possible memory leak in hpsa_init_one()

Updated under an hour ago (Oct 27, 2026, 5:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before f4d1c14e8b404766ff2bb8644bb19443d73965de; from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e; from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before c808edbf580bfc454671cbe66e9d7c2e938e7601; from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before bfe10a1d9fbccdf39f8449d62509f070d8aaaac1; from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507; 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef builds before 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e; from 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef before 9c9ff300e0de07475796495d86f449340d454a0c; 1edd825c11f8ed2c409d6fb6b3d90a042cbf738d; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/f4d1c14e8b404766ff2bb8644bb19443d73965de
https://git.kernel.org/stable/c/f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e
https://git.kernel.org/stable/c/c808edbf580bfc454671cbe66e9d7c2e938e7601
https://git.kernel.org/stable/c/bfe10a1d9fbccdf39f8449d62509f070d8aaaac1
https://git.kernel.org/stable/c/fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507
https://git.kernel.org/stable/c/0aa7be66168b1e84b2581ffff3ccb54a6c804a1e
https://git.kernel.org/stable/c/9c9ff300e0de07475796495d86f449340d454a0c

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.