CVE-2022-50510

low-risk
Published 2025-10-07

In the Linux kernel, the following vulnerability has been resolved: perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm_smmu_pmu_init() won't remove the callback added by cpuhp_setup_state_multi() when platform_driver_register() failed. Remove the callback by cpuhp_remove_multi_state() in fail path. Similar to the handling of arm_ccn_init() in commit 26242b330093 ("bus: arm-ccn: Prevent hotplug callback leak")

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/359286f886feef38536eaa7e673dc3440f03b0a1
Patch https://git.kernel.org/stable/c/582babe17ea878ec1d76f30e03f3a6ce6e30eb91
Patch https://git.kernel.org/stable/c/6f2d566b46436a50a80d6445e82879686b89588c
Patch https://git.kernel.org/stable/c/b131304fe722853cf26e55c4fa21fc58a36e7f21
Patch https://git.kernel.org/stable/c/d69bdb61d577297d3851fc9f6403574bf73ef41f
Patch https://git.kernel.org/stable/c/f245ca9a0fe7f794a8187ad803d5e2ced5a11cb2
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal