Dashboard / CVE-2022-50042

CVE-2022-50042

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itself also needs fixing as it currently gives up on error without recording the allocated pointer in the pstate pointer.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
Linux Linux 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 83411c9f05d5a8b637293b3389eca3d378197c04
Linux Linux 50a896cf2d6f34e884a00139d6e6012c9833ace3 < b0672895d8be5d19d4b05ac83f807026fc791037
Linux Linux 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 26b6acd365823e99e46be3b27500f5dc235dda5e
Linux Linux 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 249801360db3dec4f73768c502192020bfddeacc
Linux Linux 5.10
linux linux_kernel 5.10 – 5.10.138
linux linux_kernel 6.0

References & Advisories (4)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.25%
Raw Score 0.002540
Percentile 17.1%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →

External Links