Riskcovery

CVE-2022-50065

virtio_net: fix memory leak inside XPD_TX with mergeable

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: fix memory leak inside XPD_TX with mergeable

When we call xdp_convert_buff_to_frame() to get xdpf, if it returns NULL, we should check if xdp_page was allocated by xdp_linearize_page(). If it is newly allocated, it should be freed here alone. Just like any other "goto err_xdp".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa to before faafa2a87f697ee537c29446097e1cc3143506faAffected
  • 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa to before d3723eab11196475ef83279571b2b0bd0924cf82Affected
  • 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa to before 18e383afbd7047af7b055df6e25436e0ce28f8a5Affected
  • 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa to before 7a542bee27c6a57e45c33cbbdc963325fd6493afAffected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 5.10.138 through 5.10.*Not affected
  • 5.15.63 through 5.15.*Not affected
  • 5.19.4 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.