CVE-2022-50201

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50201
In the Linux kernel, the following vulnerability has been resolved: selinux: fix memleak in security_read_state_kernel() In this function, it directly returns the result of __security_read_policy without freeing the allocated memory in *data, cause memory leak issue, so free the memory if __security_read_policy failed. [PM: subject line tweak]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1fc1f72aad2070d34022d0823e4cf09706b53f25 Patch
https://git.kernel.org/stable/c/73de1befcc53a7c68b0c5e76b9b5ac41c517760f Patch
https://git.kernel.org/stable/c/c877c5217145bda8fd95f506bf42f8d981afa57d Patch
https://git.kernel.org/stable/c/f3cd7562c0a6774fc62d79654482014020e574f5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 12:46

Type Values Removed Values Added
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: selinux: corrige memleak en security_read_state_kernel() En esta función, devuelve directamente el resultado de __security_read_policy sin liberar la memoria asignada en *data, lo que causa un problema de pérdida de memoria, por lo que libera la memoria si __security_read_policy falla. [PM: ajuste de la línea de asunto]
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1fc1f72aad2070d34022d0823e4cf09706b53f25 - () https://git.kernel.org/stable/c/1fc1f72aad2070d34022d0823e4cf09706b53f25 - Patch
References () https://git.kernel.org/stable/c/73de1befcc53a7c68b0c5e76b9b5ac41c517760f - () https://git.kernel.org/stable/c/73de1befcc53a7c68b0c5e76b9b5ac41c517760f - Patch
References () https://git.kernel.org/stable/c/c877c5217145bda8fd95f506bf42f8d981afa57d - () https://git.kernel.org/stable/c/c877c5217145bda8fd95f506bf42f8d981afa57d - Patch
References () https://git.kernel.org/stable/c/f3cd7562c0a6774fc62d79654482014020e574f5 - () https://git.kernel.org/stable/c/f3cd7562c0a6774fc62d79654482014020e574f5 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 12:46

NVD link : CVE-2022-50201

Mitre link : CVE-2022-50201

CVE.ORG link : CVE-2022-50201

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime