---
id: CVE-2022-50065
title: 'virtio_net: fix memory leak inside XPD_TX with mergeable'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  virtio_net: fix memory leak inside XPD_TX with mergeable

  When we call xdp_convert_buff_to_frame() to get xdpf, if it returns
  NULL, we should check if xdp_page was allo…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa <
    faafa2a87f697ee537c29446097e1cc3143506fa
  - >-
    Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa <
    d3723eab11196475ef83279571b2b0bd0924cf82
  - >-
    Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa <
    18e383afbd7047af7b055df6e25436e0ce28f8a5
  - >-
    Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa <
    7a542bee27c6a57e45c33cbbdc963325fd6493af
  - Linux 4.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:53:36.753561Z'
published: '2025-06-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:15.337Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50065'
references:
  - url: 'https://git.kernel.org/stable/c/faafa2a87f697ee537c29446097e1cc3143506fa'
  - url: 'https://git.kernel.org/stable/c/d3723eab11196475ef83279571b2b0bd0924cf82'
  - url: 'https://git.kernel.org/stable/c/18e383afbd7047af7b055df6e25436e0ce28f8a5'
  - url: 'https://git.kernel.org/stable/c/7a542bee27c6a57e45c33cbbdc963325fd6493af'
tags:
  - cve.org
epss: 0.00193
epssPercentile: 0.09041
ingestedAt: '2026-11-05T22:38:31.642Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: fix memory leak inside XPD_TX with mergeable

When we call xdp_convert_buff_to_frame() to get xdpf, if it returns
NULL, we should check if xdp_page was allocated by xdp_linearize_page().
If it is newly allocated, it should be freed here alone. Just like any
other "goto err_xdp".

## Affected

- `Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < faafa2a87f697ee537c29446097e1cc3143506fa`
- `Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < d3723eab11196475ef83279571b2b0bd0924cf82`
- `Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 18e383afbd7047af7b055df6e25436e0ce28f8a5`
- `Linux >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 7a542bee27c6a57e45c33cbbdc963325fd6493af`
- `Linux 4.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.