{"id":"CVE-2022-50042","title":"net: genl: fix error path memory leak in policy dumping","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: genl: fix error path memory leak in policy dumping\n\nIf construction of the array of policies fails when recording\nnon-first policy we need to unwind.\n\nnetlink_poli…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 83411c9f05d5a8b637293b3389eca3d378197c04","Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < b0672895d8be5d19d4b05ac83f807026fc791037","Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 26b6acd365823e99e46be3b27500f5dc235dda5e","Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 249801360db3dec4f73768c502192020bfddeacc","Linux 5.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:53:16.705211Z"},"published":"2025-06-18","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:00:14.460Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50042","references":[{"url":"https://git.kernel.org/stable/c/83411c9f05d5a8b637293b3389eca3d378197c04"},{"url":"https://git.kernel.org/stable/c/b0672895d8be5d19d4b05ac83f807026fc791037"},{"url":"https://git.kernel.org/stable/c/26b6acd365823e99e46be3b27500f5dc235dda5e"},{"url":"https://git.kernel.org/stable/c/249801360db3dec4f73768c502192020bfddeacc"}],"tags":["cve.org"],"epss":0.00254,"epssPercentile":0.17101,"ingestedAt":"2026-11-05T22:38:31.639Z","slug":"CVE-2022-50042","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: genl: fix error path memory leak in policy dumping\n\nIf construction of the array of policies fails when recording\nnon-first policy we need to unwind.\n\nnetlink_policy_dump_add_policy() itself also needs fixing as\nit currently gives up on error without recording the allocated\npointer in the pstate pointer.\n\n## Affected\n\n- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 83411c9f05d5a8b637293b3389eca3d378197c04`\n- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < b0672895d8be5d19d4b05ac83f807026fc791037`\n- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 26b6acd365823e99e46be3b27500f5dc235dda5e`\n- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 249801360db3dec4f73768c502192020bfddeacc`\n- `Linux 5.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}