CVE-2022-50495: 
Linux Debian vulnerability analysis and mitigation

CVE-2022-50495 was initially reported on October 4, 2025, and was later rejected by its CVE Numbering Authority on October 5, 2025. The vulnerability was identified in the Linux kernel, specifically in the x86/xen subsystem, affecting the xen_smp_intr_init{_pv}() function (NVD).

The vulnerability involved a memory leak issue in the Linux kernel's x86/xen subsystem. The issue occurred when local variables @{resched|pmu|callfunc...}name saved new strings allocated by kasprintf(), and when bind{v}ipi_to_irqhandler() failed, it went to the @fail tag and called xen_smp_intr_free{_pv}() to free resources. However, the new string was not properly saved, resulting in a memory leak (Kernel).

Before being rejected, the vulnerability was assessed with a medium severity rating of 5.5, primarily affecting system availability. The memory leak could potentially lead to resource exhaustion over time (Snyk).