CVE Database›CVE-2022-50748

CVE-2022-50748

kernel: Kernel: Denial of Service via memory leak in mqueue component

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 24, 2025

Updated · June 30, 2026

Description

A flaw was found in the Linux kernel's mqueue (message queue) component. A local attacker with low privileges could exploit a memory leak in the init_mqueue_fs() function. This vulnerability occurs when retire_mq_sysctls is not called after setup_mq_sysctls fails, leading to resource exhaustion. This could result in a Denial of Service (DoS) condition, making the system unavailable.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime