← CVE Intelligence

CVE-2022-50042

net: genl: fix error path memory leak in policy dumping PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itself also needs fixing as it currently gives up on error without recording the allocated pointer in the pstate pointer.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 50a896cf2d6f34e884a00139d6e6012c9833ace3 before 83411c9f05d5a8b637293b3389eca3d378197c04; affected 50a896cf2d6f34e884a00139d6e6012c9833ace3 before b0672895d8be5d19d4b05ac83f807026fc791037; affected 50a896cf2d6f34e884a00139d6e6012c9833ace3 before 26b6acd365823e99e46be3b27500f5dc235dda5e; affected 50a896cf2d6f34e884a00139d6e6012c9833ace3 before 249801360db3dec4f73768c502192020bfddeacc
Linux / Linuxaffected 5.10; unaffected 0 before 5.10; unaffected 5.10.138 through 5.10.*; unaffected 5.15.63 through 5.15.*; unaffected 5.19.4 through 5.19.*; unaffected 6.0 through *

CWE

No CWE identifiers supplied.

References