CVE-2022-50043

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50043
In the Linux kernel, the following vulnerability has been resolved: net: fix potential refcount leak in ndisc_router_discovery() The issue happens on specific paths in the function. After both the object `rt` and `neigh` are grabbed successfully, when `lifetime` is nonzero but the metric needs change, the function just deletes the route and set `rt` to NULL. Then, it may try grabbing `rt` and `neigh` again if above conditions hold. The function simply overwrite `neigh` if succeeds or returns if fails, without decreasing the reference count of previous `neigh`. This may result in memory leaks. Fix it by decrementing the reference count of `neigh` in place.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7396ba87f1edf549284869451665c7c4e74ecd4f Patch
https://git.kernel.org/stable/c/7998043d31d000c3a93f46182e6569dd0eecda34 Patch
https://git.kernel.org/stable/c/ffb15594433391fd7885eb88ce5a7f7bdeefbb15 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:32

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/7396ba87f1edf549284869451665c7c4e74ecd4f - () https://git.kernel.org/stable/c/7396ba87f1edf549284869451665c7c4e74ecd4f - Patch
References () https://git.kernel.org/stable/c/7998043d31d000c3a93f46182e6569dd0eecda34 - () https://git.kernel.org/stable/c/7998043d31d000c3a93f46182e6569dd0eecda34 - Patch
References () https://git.kernel.org/stable/c/ffb15594433391fd7885eb88ce5a7f7bdeefbb15 - () https://git.kernel.org/stable/c/ffb15594433391fd7885eb88ce5a7f7bdeefbb15 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: corrección de una posible fuga de referencias en ndisc_router_discovery(). El problema se produce en rutas específicas de la función. Tras la captura correcta de los objetos `rt` y `neigh`, cuando `lifetime` es distinto de cero pero la métrica necesita cambiar, la función simplemente elimina la ruta y establece `rt` en NULL. A continuación, puede intentar capturar `rt` y `neigh` de nuevo si se cumplen las condiciones anteriores. La función simplemente sobrescribe `neigh` si tiene éxito o retorna si falla, sin reducir la cantidad de referencias de `neigh` anterior. Esto puede provocar fugas de memoria. Para solucionarlo, reduzca la cantidad de referencias de `neigh` en su lugar.
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:32

NVD link : CVE-2022-50043

Mitre link : CVE-2022-50043

CVE.ORG link : CVE-2022-50043

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other