CVE-2022-49636

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the vlan newlink() function. This occurs when a memory allocation fails in vlan changelink() after other allocations have succeeded, and the allocated memory is not properly freed. The issue can be triggered by creating a VLAN interface with a large number of egress QoS mappings, such as ip link add link dummy0 dummy0.100 type vlan id 100 egress-qos-map 1:2 2:3 3:4 4:5 5:6 6:7 7:8 8:9 2000:2001. The memory leak can lead to unreferenced objects, as reported by syzbot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.