What is CVE-2022-50727?

CVE-2022-50727 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 5.14 onward and patched in 5.15.86, 6.0.16, 6.1.2 and others. CVE-2022-50727 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2022-50727?

CVE-2022-50727 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2022-50727?

Yes, CVE-2022-50727 has been patched. Fixed versions include 5.15.86, 6.0.16, 6.1.2 and others. If you are running Linux kernel 5.14 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2022-50727 actively exploited?

CVE-2022-50727 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2022-50727

In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efct_device_init() In efct_device_init(), when efct_scsi_reg_fc_transport() fails, efct_scsi_tgt_driver_exit() is not called to release memory for efct_scsi_tgt_driver_init() and causes memleak: unreferenced object 0xffff8881020ce000 (size 2048): comm "modprobe", pid 465, jiffies 4294928222 (age 55.872s) backtrace: [<0000000021a1ef1b>] kmalloc_trace+0x27/0x110 [<000000004c3ed51c>] target_register_template+0x4fd/0x7b0 [target_core_mod] [<00000000f3393296>] efct_scsi_tgt_driver_init+0x18/0x50 [efct] [<00000000115de533>] 0xffffffffc0d90011 [<00000000d608f646>] do_one_initcall+0xd0/0x4e0 [<0000000067828cf1>] do_init_module+0x1cc/0x6a0 ...

Package Linux Kernel

Published 2025-12-24

Last modified 2026-04-15

Patch available

Yes

Affected versions

Linux kernel versions 5.14 and later are affected. Fixed in 5.15.86, 6.0.16, 6.1.2, 6.2 and their respective stable series.

Affected from

≥ 5.14

Fixed in

✓ 5.15.86 5.15.x ✓ 6.0.16 6.0.x ✓ 6.1.2 6.1.x ✓ 6.2

References

The following references provide additional information about CVE-2022-50727 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/038359eeccffaf0de4c1c9c51ee19cc5649619a1
Patch
Kernel patch commit
https://git.kernel.org/stable/c/0c6e6bb30229b1297ac0fd7ede2941d2322fc736
Patch
Kernel patch commit
https://git.kernel.org/stable/c/bb0cd225dd37df1f4a22e36dad59ff33178ecdfc
Patch

4 patch commits total View all on NVD

Frequently asked questions

What is CVE-2022-50727?

CVE-2022-50727 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.14 onward and has been patched in 5.15.86, 6.0.16, 6.1.2 and others. CVE-2022-50727 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2022-50727?

Yes — CVE-2022-50727 has been patched. Fixed versions include 5.15.86, 6.0.16, 6.1.2 and others. If you are running Linux kernel 5.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2022-50727 actively exploited?

No — CVE-2022-50727 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.