{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"83411c9f05d5a8b637293b3389eca3d378197c04","status":"affected","version":"50a896cf2d6f34e884a00139d6e6012c9833ace3","versionType":"git"},{"lessThan":"b0672895d8be5d19d4b05ac83f807026fc791037","status":"affected","version":"50a896cf2d6f34e884a00139d6e6012c9833ace3","versionType":"git"},{"lessThan":"26b6acd365823e99e46be3b27500f5dc235dda5e","status":"affected","version":"50a896cf2d6f34e884a00139d6e6012c9833ace3","versionType":"git"},{"lessThan":"249801360db3dec4f73768c502192020bfddeacc","status":"affected","version":"50a896cf2d6f34e884a00139d6e6012c9833ace3","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.138","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.63","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-50042","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: genl: fix error path memory leak in policy dumping\n\nIf construction of the array of policies fails when recording\nnon-first policy we need to unwind.\n\nnetlink_policy_dump_add_policy() itself also needs fixing as\nit currently gives up on error without recording the allocated\npointer in the pstate pointer.","epss":{"date":"2026-11-05","percentile":0.17108,"score":0.00254},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908814460,"publishedAt":1750244503264,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/83411c9f05d5a8b637293b3389eca3d378197c04"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b0672895d8be5d19d4b05ac83f807026fc791037"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/26b6acd365823e99e46be3b27500f5dc235dda5e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/249801360db3dec4f73768c502192020bfddeacc"}],"remediation":[],"revision":"600baa72cd5d8481c478964a932c0e2096d07a0fd16bf231fc27c5fd5865cd3f","sources":[{"modifiedAt":1793908814460,"name":"CNA: Linux","retrievedAt":1793909507844,"url":"https://www.cve.org/CVERecord?id=CVE-2022-50042"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909517435,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-50042"}],"ssvc":{"assessedAt":1793908396705,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"net: genl: fix error path memory leak in policy dumping","updatedAt":1793909517435}