Riskcovery

CVE-2022-50201

selinux: fix memleak in security_read_state_kernel()

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: fix memleak in security_read_state_kernel()

In this function, it directly returns the result of __security_read_policy without freeing the allocated memory in *data, cause memory leak issue, so free the memory if __security_read_policy failed.

[PM: subject line tweak]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fdd1ffe8a812b1109388e4bc389e57b2695ad095 to before c877c5217145bda8fd95f506bf42f8d981afa57dAffected
  • fdd1ffe8a812b1109388e4bc389e57b2695ad095 to before f3cd7562c0a6774fc62d79654482014020e574f5Affected
  • fdd1ffe8a812b1109388e4bc389e57b2695ad095 to before 1fc1f72aad2070d34022d0823e4cf09706b53f25Affected
  • fdd1ffe8a812b1109388e4bc389e57b2695ad095 to before 73de1befcc53a7c68b0c5e76b9b5ac41c517760fAffected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.