---
id: CVE-2022-50042
title: 'net: genl: fix error path memory leak in policy dumping'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: genl: fix error path memory leak in policy dumping

  If construction of the array of policies fails when recording
  non-first policy we need to unwind.

  netlink_poli…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 <
    83411c9f05d5a8b637293b3389eca3d378197c04
  - >-
    Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 <
    b0672895d8be5d19d4b05ac83f807026fc791037
  - >-
    Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 <
    26b6acd365823e99e46be3b27500f5dc235dda5e
  - >-
    Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 <
    249801360db3dec4f73768c502192020bfddeacc
  - Linux 5.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:53:16.705211Z'
published: '2025-06-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:14.460Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50042'
references:
  - url: 'https://git.kernel.org/stable/c/83411c9f05d5a8b637293b3389eca3d378197c04'
  - url: 'https://git.kernel.org/stable/c/b0672895d8be5d19d4b05ac83f807026fc791037'
  - url: 'https://git.kernel.org/stable/c/26b6acd365823e99e46be3b27500f5dc235dda5e'
  - url: 'https://git.kernel.org/stable/c/249801360db3dec4f73768c502192020bfddeacc'
tags:
  - cve.org
epss: 0.00254
epssPercentile: 0.17101
ingestedAt: '2026-11-05T22:38:31.639Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: genl: fix error path memory leak in policy dumping

If construction of the array of policies fails when recording
non-first policy we need to unwind.

netlink_policy_dump_add_policy() itself also needs fixing as
it currently gives up on error without recording the allocated
pointer in the pstate pointer.

## Affected

- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 83411c9f05d5a8b637293b3389eca3d378197c04`
- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < b0672895d8be5d19d4b05ac83f807026fc791037`
- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 26b6acd365823e99e46be3b27500f5dc235dda5e`
- `Linux >= 50a896cf2d6f34e884a00139d6e6012c9833ace3 < 249801360db3dec4f73768c502192020bfddeacc`
- `Linux 5.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
