CVE-2022-49620

net: tipc: fix possible refcount leak in tipc_sk_create()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: tipc: fix possible refcount leak in tipc_sk_create()

Free sk in case tipc_sk_insert() fails.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 638fa20b618b2bbcf86da71231624cc82121a036Affected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 7bc9e7f70bc57d8f02ffea2a42094281effb15efAffected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before ef488669b2652bde5b6ee5a409a5b048a2a50db4Affected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 4919d82f7041157a421ca9bf39a78551d5ad8a1bAffected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before efa78f2ae363428525fb4981bb63c555ee79f3c7Affected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 833ecd0eae76eadf81d6d747bb5bc992d1151867Affected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2Affected 5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 00aff3590fc0a73bddd3b743863c14e76fd35c0cAffected
LinuxLinux	3.18Affected before 3.18Not affected 4.9.324 through 4.9.Not affected 4.14.289 through 4.14.Not affected 4.19.253 through 4.19.Not affected 5.4.207 through 5.4.Not affected 5.10.132 through 5.10.Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 638fa20b618b2bbcf86da71231624cc82121a036Affected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 7bc9e7f70bc57d8f02ffea2a42094281effb15efAffected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before ef488669b2652bde5b6ee5a409a5b048a2a50db4Affected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 4919d82f7041157a421ca9bf39a78551d5ad8a1bAffected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before efa78f2ae363428525fb4981bb63c555ee79f3c7Affected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 833ecd0eae76eadf81d6d747bb5bc992d1151867Affected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2Affected
5b8fa7ce823a59a328e0a7661df2478bfb745de4 to before 00aff3590fc0a73bddd3b743863c14e76fd35c0cAffected

LinuxLinux

3.18Affected
before 3.18Not affected
4.9.324 through 4.9.*Not affected
4.14.289 through 4.14.*Not affected
4.19.253 through 4.19.*Not affected
5.4.207 through 5.4.*Not affected
5.10.132 through 5.10.*Not affected
5.15.56 through 5.15.*Not affected
5.18.13 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.