CVE-2022-50707virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() 'vc_ctrl_req' is alloced in virtio_crypto_alg_skcipher_close_session(), and should be freed in the invalid ctrl_status->status error handling case. Otherwise there is a memory leak.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4ee475e76b5ea8061970a7c867ffa5eedeb39580 before 79026a2d0a1b080257773d22a493f9bcab8c65be; 0756ad15b1fef287d4d8fa11bc36ea77a5c42e4a builds before 67fb59ff1384e338679c0eb7a43c83ce8868c9fa; from 0756ad15b1fef287d4d8fa11bc36ea77a5c42e4a before 0871df190fe6723464efe0f493d476411616f553; from 0756ad15b1fef287d4d8fa11bc36ea77a5c42e4a before b1d65f717cd6305a396a8738e022c6f7c65cfbe8 | CNA record |
References
- https://git.kernel.org/stable/c/79026a2d0a1b080257773d22a493f9bcab8c65be
- https://git.kernel.org/stable/c/67fb59ff1384e338679c0eb7a43c83ce8868c9fa
- https://git.kernel.org/stable/c/0871df190fe6723464efe0f493d476411616f553
- https://git.kernel.org/stable/c/b1d65f717cd6305a396a8738e022c6f7c65cfbe8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.