CVE-2022-50396

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak within the tcindex set parms function, specifically when changing existing filter properties. The issue arises when an old filter result is cleared using tcindex filter result init() without properly destroying its associated tcf exts structure, leading to a memory leak. This occurs when the old r value is retrieved from p->perfect, triggering the allocation of new filter results and subsequent clearing of the old result without deallocation. The vulnerability was identified through Syzkaller testing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.