CVE-2022-50622
kernel: Linux kernel (ext4): Memory leak due to improper handling of krealloc failure
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 8, 2025
Updated · June 30, 2026
Description
A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability occurs due to improper handling of memory allocation failures when the krealloc function returns NULL within ext4_fc_record_modified_inode(). A local user could potentially exploit this flaw, leading to a memory leak. This memory leak can ultimately result in a Denial of Service (DoS) condition on the affected system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime