Vulnerability in Linux

CVE-2022-50837

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path If dsa_tag_8021q_setup() fails, for example due to the inability of the device to install a VLAN, the tag_8021q context of the switch will leak. Make sure it is freed on the error path.

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 328621f6131f667c5c328bb72d45442fd76efb81, 5.15, 0

References