CVE-2022-50007

xfrm: fix refcount leak in __xfrm_policy_check()

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfrm: fix refcount leak in __xfrm_policy_check()

The issue happens on an error path in __xfrm_policy_check(). When the

fetching process of the object `pols[1]` fails, the function simply

returns 0, forgetting to decrement the reference count of `pols[0]`,

which is incremented earlier by either xfrm_sk_policy_lookup() or

xfrm_policy_lookup(). This may result in memory leaks.

Fix it by decreasing the reference count of `pols[0]` in that path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.0th percentile
Published
2025-06-18T11:01Z
EPSS history
Timeline
  • 18 JUN 11:01Z
    xfrm: fix refcount leak in __xfrm_policy_check()
    cvelistv5