CVE-2022-50065

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_buff_to_frame() to get xdpf, if it returns NULL, we should check if xdp_page was allocated by xdp_linearize_page(). If it is newly allocated, it should be freed here alone. Just like any other "goto err_xdp".

Weakness Classification (1)

CWE-401

Affected Software (6)

Vendor	Product	Version
Linux	Linux	44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < faafa2a87f697ee537c29446097e1cc3143506fa
Linux	Linux	44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < d3723eab11196475ef83279571b2b0bd0924cf82
Linux	Linux	44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 18e383afbd7047af7b055df6e25436e0ce28f8a5
Linux	Linux	44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 7a542bee27c6a57e45c33cbbdc963325fd6493af
Linux	Linux	4.18
linux	linux_kernel	4.18 – 5.10.138