Not yet scoredPublished Dec 24, 2025

CVE-2022-50742misc: ocxl: fix possible refcount leak in afu_ioctl()

Updated under an hour ago (Oct 28, 2026, 9:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afu_ioctl() eventfd_ctx_put need to be called to put the refcount that gotten by eventfd_ctx_fdget when ocxl_irq_set_handler fails.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 060146614643ddc5978c73ffac0329762b4651c9 before fc797285c40a9cc441357abb3521d3e51c743f67; 060146614643ddc5978c73ffac0329762b4651c9 builds before 7ba19a60c74fb0057d4daef2fa2cbfc9522f3ba1; 060146614643ddc5978c73ffac0329762b4651c9 builds before 11bd8bbdf8f6f5c1145bb158793107a57e3a1f07; 060146614643ddc5978c73ffac0329762b4651c9 builds before 843433a02e344d30fbb62dfd834c60631baaa527; 060146614643ddc5978c73ffac0329762b4651c9 builds before 66032c43291672bae8b93184d2806f05be3e16df; from 060146614643ddc5978c73ffac0329762b4651c9 before c3b69ba5114c860d730870c03ab4ee45276e5e35	CNA record

References

References

https://git.kernel.org/stable/c/fc797285c40a9cc441357abb3521d3e51c743f67
https://git.kernel.org/stable/c/7ba19a60c74fb0057d4daef2fa2cbfc9522f3ba1
https://git.kernel.org/stable/c/11bd8bbdf8f6f5c1145bb158793107a57e3a1f07
https://git.kernel.org/stable/c/843433a02e344d30fbb62dfd834c60631baaa527
https://git.kernel.org/stable/c/66032c43291672bae8b93184d2806f05be3e16df
https://git.kernel.org/stable/c/c3b69ba5114c860d730870c03ab4ee45276e5e35

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.