{"id":"DEBIAN-CVE-2022-50765","details":"In the Linux kernel, the following vulnerability has been resolved:  RISC-V: kexec: Fix memory leak of elf header buffer  This is reported by kmemleak detector:  unreferenced object 0xff2000000403d000 (size 4096):   comm \"kexec\", pid 146, jiffies 4294900633 (age 64.792s)   hex dump (first 32 bytes):     7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00  .ELF............     04 00 f3 00 01 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003c00000000566ca97c\u003e] kmemleak_vmalloc+0x3c/0xbe     [\u003c00000000979283d8\u003e] __vmalloc_node_range+0x3ac/0x560     [\u003c00000000b4b3712a\u003e] __vmalloc_node+0x56/0x62     [\u003c00000000854f75e2\u003e] vzalloc+0x2c/0x34     [\u003c00000000e9a00db9\u003e] crash_prepare_elf64_headers+0x80/0x30c     [\u003c0000000067e8bf48\u003e] elf_kexec_load+0x3e8/0x4ec     [\u003c0000000036548e09\u003e] kexec_image_load_default+0x40/0x4c     [\u003c0000000079fbe1b4\u003e] sys_kexec_file_load+0x1c4/0x322     [\u003c0000000040c62c03\u003e] ret_from_syscall+0x0/0x2  In elf_kexec_load(), a buffer is allocated via vzalloc() to store elf headers.  While it's not freed back to system when kdump kernel is reloaded or unloaded, or when image-\u003eelf_header is successfully set and then fails to load kdump kernel for some reason. Fix it by freeing the buffer in arch_kimage_file_post_load_cleanup().","modified":"2026-09-01T20:05:01.002694660Z","published":"2025-12-24T13:16:03.297Z","upstream":["CVE-2022-50765"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50765"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50765.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50765.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50765.json"}}],"schema_version":"1.9.0"}