CVE-2022-50042

net: genl: fix error path memory leak in policy dumping

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: genl: fix error path memory leak in policy dumping

If construction of the array of policies fails when recording

non-first policy we need to unwind.

netlink_policy_dump_add_policy() itself also needs fixing as

it currently gives up on error without recording the allocated

pointer in the pstate pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.8th percentile
Published
2025-06-18T11:01Z
EPSS history
Timeline
  • 18 JUN 11:01Z
    net: genl: fix error path memory leak in policy dumping
    cvelistv5