CVE-2022-50438: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50438 is a memory leak vulnerability in the Linux kernel's HiNIC network driver. Specifically, within the hinic_dbg_get_func_table() function, when the input parameter idx matches an expected case option, the read_data memory allocation is not properly released, resulting in a kernel memory leak (CWE-401). The vulnerability was published on October 1, 2025, and affects Linux kernel versions 5.10 through 5.10.152, 5.11 through 5.15.76, 5.16 through 6.0.6, and 6.1-rc1/rc2. It carries a CVSS v3.1 base score of 5.5 (Medium) (Red Hat Advisory, kernel.org patches).

The root cause is classified as CWE-401 (Missing Release of Memory after Effective Lifetime). In hinic_dbg_get_func_table(), a code path triggered when the idx parameter matches a specific case branch allocates memory into read_data but fails to free it before returning, creating a kernel memory leak. Exploitation requires local access with low privileges — an attacker can repeatedly invoke the affected debugfs function to accumulate unreleased kernel memory allocations over time. No public proof-of-concept exploit code has been identified (Red Hat Advisory, kernel.org patches).

Successful exploitation can lead to gradual exhaustion of available kernel memory, resulting in denial of service through system performance degradation or eventual system unavailability. There is no confidentiality or integrity impact — the vulnerability is limited to availability (kernel memory exhaustion). The attack scope is local and unchanged, meaning an attacker cannot leverage this vulnerability alone to escalate privileges or move laterally (Red Hat Advisory).

There is no evidence of public proof-of-concept exploit code or in-the-wild exploitation of CVE-2022-50438. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The EPSS score is approximately 0.018%, reflecting a very low probability of exploitation in the near term. Exploitation requires local access with low privileges, further limiting the practical attack surface (Red Hat Advisory).

Patches are available in the following Linux kernel stable releases: 5.10.153, 5.15.77, 6.0.7, and 6.1 (mainline). Organizations should upgrade to the latest stable kernel version within their supported series. For systems that cannot be immediately updated, restricting local access and minimizing the privileges of non-essential users reduces the attack surface. The upstream fixes are available via the kernel stable tree (kernel.org patches, Red Hat Advisory).