Vulnerability in Linux

CVE-2022-50748

In the Linux kernel, the following vulnerability has been resolved: ipc: mqueue: fix possible memory leak in init_mqueue_fs() commit db7cfc380900 ("ipc: Free mq_sysctls if ipc namespace creation failed") Here's a similar memory leak to the one fixed by the patch above. retire_mq_sysctls need to be called when init_mqueue_fs fails after setup_mq_sysctls.

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions dc55e35f9e810f23dd69cfdc91a3d636023f57a2, 5.19, 0

References