PT-2025-25968 · Linux+3 · Linux Kernel+3

Published 2021-11-09 · Updated 2025-06-18 · CVE-2022-50042

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the netlink policy dumping functionality. The error occurs when constructing an array of policies fails during the recording of non-first policies, and the allocated pointer is not properly recorded in the pstate pointer. This issue is related to the netlink policy dump add policy() function, which does not handle errors correctly, leading to memory leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-03401

CESA-2021_4356

CVE-2022-50042

RHSA-2021:4356

RHSA-2021_4356

RHSA-2023:6583

RHSA-2023:7370

RHSA-2023_6583

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50042.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-50042 · Vendor Advisory
• https://git.kernel.org/stable/c/26b6acd365823e99e46be3b27500f5dc235dda5e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50042 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50042 · Vendor Advisory
• https://git.kernel.org/stable/c/249801360db3dec4f73768c502192020bfddeacc · Patch
• https://ubuntu.com/security/CVE-2022-50042 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50042 · Vendor Advisory
• https://git.kernel.org/stable/c/83411c9f05d5a8b637293b3389eca3d378197c04 · Patch
• https://git.kernel.org/stable/c/b0672895d8be5d19d4b05ac83f807026fc791037 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50042 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50042 · Security Note
• https://bdu.fstec.ru/vul/2026-03401 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.138 · Note
• https://access.redhat.com/security/cve/cve-2022-50042 · Note