{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"ffb15594433391fd7885eb88ce5a7f7bdeefbb15","status":"affected","version":"6b2e04bc240fe9be9e690059f710e9f95346d34d","versionType":"git"},{"lessThan":"7998043d31d000c3a93f46182e6569dd0eecda34","status":"affected","version":"6b2e04bc240fe9be9e690059f710e9f95346d34d","versionType":"git"},{"lessThan":"7396ba87f1edf549284869451665c7c4e74ecd4f","status":"affected","version":"6b2e04bc240fe9be9e690059f710e9f95346d34d","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.12"},{"lessThan":"5.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.63","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-50043","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix potential refcount leak in ndisc_router_discovery()\n\nThe issue happens on specific paths in the function. After both the\nobject `rt` and `neigh` are grabbed successfully, when `lifetime` is\nnonzero but the metric needs change, the function just deletes the\nroute and set `rt` to NULL. Then, it may try grabbing `rt` and `neigh`\nagain if above conditions hold. The function simply overwrite `neigh`\nif succeeds or returns if fails, without decreasing the reference\ncount of previous `neigh`. This may result in memory leaks.\n\nFix it by decrementing the reference count of `neigh` in place.","epss":{"date":"2026-11-05","percentile":0.09268,"score":0.00195},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908814681,"publishedAt":1750244504186,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ffb15594433391fd7885eb88ce5a7f7bdeefbb15"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7998043d31d000c3a93f46182e6569dd0eecda34"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7396ba87f1edf549284869451665c7c4e74ecd4f"}],"remediation":[],"revision":"cb0e5bf1ce55b35a9f91c82250c74fbde710c3b118484765068fded0ede037f6","sources":[{"modifiedAt":1793908814681,"name":"CNA: Linux","retrievedAt":1793909509253,"url":"https://www.cve.org/CVERecord?id=CVE-2022-50043"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909517125,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-50043"}],"ssvc":{"assessedAt":1793908400660,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"net: fix potential refcount leak in ndisc_router_discovery()","updatedAt":1793909517125}