CVE-2022-50189

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50189

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix file pointer leak Currently if a fscanf fails then an early return leaks an open file pointer. Fix this by fclosing the file before the return. Detected using static analysis with cppcheck: tools/power/x86/turbostat/turbostat.c:2039:3: error: Resource leak: fp [resourceLeak]

References
Link Resource
https://git.kernel.org/stable/c/2ebf6f5946817f33fb33e613e359229e98164eb3 Patch
https://git.kernel.org/stable/c/5e5fd36c58d6c820f7292ee492c3731c9a104a41 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Jan 2026, 16:41

Type Values Removed Values Added
CWE CWE-772
References () https://git.kernel.org/stable/c/2ebf6f5946817f33fb33e613e359229e98164eb3 - () https://git.kernel.org/stable/c/2ebf6f5946817f33fb33e613e359229e98164eb3 - Patch
References () https://git.kernel.org/stable/c/5e5fd36c58d6c820f7292ee492c3731c9a104a41 - () https://git.kernel.org/stable/c/5e5fd36c58d6c820f7292ee492c3731c9a104a41 - Patch
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tools/power turbostat: Corrección de fuga de puntero de archivo. Actualmente, si un fscanf falla, un retorno anticipado filtra un puntero de archivo abierto. Se soluciona cerrando el archivo antes del retorno. Detectado mediante análisis estático con cppcheck: tools/power/x86/turbostat/turbostat.c:2039:3: error: Fuga de recursos: fp [resourceLeak]
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2026-01-23 16:41

NVD link : CVE-2022-50189

Mitre link : CVE-2022-50189

CVE.ORG link : CVE-2022-50189

JSON object : View

Products Affected

linux

CWE
CWE-772

Missing Release of Resource after Effective Lifetime