CVE-2022-50748
kernel: Kernel: Denial of Service via memory leak in mqueue component
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · June 30, 2026
Description
A flaw was found in the Linux kernel's mqueue (message queue) component. A local attacker with low privileges could exploit a memory leak in the init_mqueue_fs() function. This vulnerability occurs when retire_mq_sysctls is not called after setup_mq_sysctls fails, leading to resource exhaustion. This could result in a Denial of Service (DoS) condition, making the system unavailable.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime