CVE-2022-50252CWE-416

CVE-2022-50252

High · published September 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

igb: Do not free q_vector unless new one was allocated

Avoid potential use-after-free condition under memory pressure. If the

kzalloc() fails, q_vector will be freed but left in the original

adapter->q_vector[v_idx] array position.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-09-15T18:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.9.3374.9.337
linux/linux_kernel≥ 4.10, < 4.14.3034.14.303
linux/linux_kernel≥ 4.15, < 4.19.2704.19.270
linux/linux_kernel≥ 4.20, < 5.4.2295.4.229
linux/linux_kernel≥ 5.5, < 5.10.1635.10.163
linux/linux_kernel≥ 5.11, < 5.15.865.15.86
linux/linux_kernel≥ 5.16, < 6.0.166.0.16
linux/linux_kernel≥ 6.1, < 6.1.26.1.2
References (9)
EPSS history
Timeline
  • 15 SEP 14:02Z
    igb: Do not free q_vector unless new one was allocated
    cvelistv5