CVE-2022-50042
MEDIUMLinux Kernel < 5.10.138 - Memory Leak
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itself also needs fixing as it currently gives up on error without recording the allocated pointer in the pstate pointer.
References (4)
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
5.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-401
Status
published
Affected Products (5)
linux/linux_kernel
< 5.10.138
linux/linux_kernel
linux/Kernel
< 5.10.138linux
linux/Kernel
< 5.15.63linux
linux/Kernel
< 5.19.4linux
Timeline
Published
Jun 18, 2025
Tracked Since
Feb 18, 2026