Vulnerability · Published Oct 7, 2025 · Assigned by Linux

CVE-2022-50550blk-iolatency: Fix memory leak on add_disk() failures

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 90.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix memory leak on add_disk() failures When a gendisk is successfully initialized but add_disk() fails such as when a loop device has invalid number of minor device numbers specified, blkcg_init_disk() is called during init and then blkcg_exit_disk() during error handling. Unfortunately, iolatency gets initialized in the former but doesn't get cleaned up in the latter. This is because, in non-error cases, the cleanup is performed by del_gendisk() calling rq_qos_exit(), the assumption being that rq_qos policies, iolatency being one of them, can only be activated once the disk is fully registered and visible. That assumption is true for wbt and iocost, but not so for iolatency as it gets initialized before add_disk() is called. It is desirable to lazy-init rq_qos policies because they are optional features and add to hot path overhead once initialized - each IO has to walk all the registered rq_qos policies. So, we want to switch iolatency to lazy init too. However, that's a bigger change. As a fix for the immediate problem, let's just add an extra call to rq_qos_exit() in blkcg_exit_disk(). This is safe because duplicate calls to rq_qos_exit() become noop's.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.4-1DEBIAN-CVE-2022-50550
Debian:13linux6.1.4-1DEBIAN-CVE-2022-50550
Debian:14linux6.1.4-1DEBIAN-CVE-2022-50550
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50550
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-50550
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2022-50550

Affected products (as reported)

VendorProductVersions
Linux Linux d70675121546c35feaceebf7ed9caed8716640f3 – before 2a126e1db5553ce4498290df019866952f858954d70675121546c35feaceebf7ed9caed8716640f3 – before 215f9437dda09531bcb80605298a24219f01cec5d70675121546c35feaceebf7ed9caed8716640f3 – before 813e693023ba10da9e75067780f8378465bf27cc
Linux Linux 4.19

References