{"id":"DEBIAN-CVE-2022-50342","details":"In the Linux kernel, the following vulnerability has been resolved:  floppy: Fix memory leak in do_floppy_init()  A memory leak was reported when floppy_alloc_disk() failed in do_floppy_init().  unreferenced object 0xffff888115ed25a0 (size 8):   comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)   hex dump (first 8 bytes):     00 ac 67 5b 81 88 ff ff                          ..g[....   backtrace:     [\u003c000000007f457abb\u003e] __kmalloc_node+0x4c/0xc0     [\u003c00000000a87bfa9e\u003e] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180     [\u003c000000006f02e8b1\u003e] blk_mq_alloc_tag_set+0x573/0x1130     [\u003c0000000066007fd7\u003e] 0xffffffffc06b8b08     [\u003c0000000081f5ac40\u003e] do_one_initcall+0xd0/0x4f0     [\u003c00000000e26d04ee\u003e] do_init_module+0x1a4/0x680     [\u003c000000001bb22407\u003e] load_module+0x6249/0x7110     [\u003c00000000ad31ac4d\u003e] __do_sys_finit_module+0x140/0x200     [\u003c000000007bddca46\u003e] do_syscall_64+0x35/0x80     [\u003c00000000b5afec39\u003e] entry_SYSCALL_64_after_hwframe+0x46/0xb0 unreferenced object 0xffff88810fc30540 (size 32):   comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003c000000007f457abb\u003e] __kmalloc_node+0x4c/0xc0     [\u003c000000006b91eab4\u003e] blk_mq_alloc_tag_set+0x393/0x1130     [\u003c0000000066007fd7\u003e] 0xffffffffc06b8b08     [\u003c0000000081f5ac40\u003e] do_one_initcall+0xd0/0x4f0     [\u003c00000000e26d04ee\u003e] do_init_module+0x1a4/0x680     [\u003c000000001bb22407\u003e] load_module+0x6249/0x7110     [\u003c00000000ad31ac4d\u003e] __do_sys_finit_module+0x140/0x200     [\u003c000000007bddca46\u003e] do_syscall_64+0x35/0x80     [\u003c00000000b5afec39\u003e] entry_SYSCALL_64_after_hwframe+0x46/0xb0  If the floppy_alloc_disk() failed, disks of current drive will not be set, thus the lastest allocated set-\u003etag cannot be freed in the error handling path. A simple call graph shown as below:   floppy_module_init()    floppy_init()      do_floppy_init()        for (drive = 0; drive \u003c N_DRIVE; drive++)          blk_mq_alloc_tag_set()            blk_mq_alloc_tag_set_tags()              blk_mq_realloc_tag_set_tags() # set-\u003etag allocated          floppy_alloc_disk()            blk_mq_alloc_disk() # error occurred, disks failed to allocated         -\u003eout_put_disk:        for (drive = 0; drive \u003c N_DRIVE; drive++)          if (!disks[drive][0]) # the last disks is not set and loop break            break;          blk_mq_free_tag_set() # the latest allocated set-\u003etag leaked  Fix this problem by free the set-\u003etag of current drive before jump to error handling path.  [efremov: added stable list, changed title]","modified":"2026-09-01T20:04:58.331659809Z","published":"2025-09-16T17:15:33.807Z","upstream":["CVE-2022-50342"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50342"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50342.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50342.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50342.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}