CVE-2022-50855

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: prevent leak of lsm program after failed attach

In [0], we added the ability to bpf_prog_attach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPF_LSM_CGROUP, we return too early if the check fails. This results in lack of decrementing prog's refcnt (through bpf_prog_put) leaving the LSM program alive past the point of the expected lifecycle. This fix allows for the decrement to take place.

[0] https://lore.kernel.org/all/20220628174314.1216643-4-sdf@google.com/

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e, < 82b39df5ddb298daaf6dc504032ff7eb027fa106; >= 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e, < 6a1504dd36cd9a0a69250d61da8bdb17b29f1fe8; >= 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e, < e89f3edffb860a0f54a9ed16deadb7a4a1fa3862
LinuxLinux6.0

References

Timeline

Published
Dec 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50856In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_ses_add_channel() Before return, should freCVE-2022-50857In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If deviceCVE-2022-50858In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value check of mmc_add_host() mmc_add_host() maCVE-2022-50859In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message Commit dCVE-2022-508607.8In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc_ns() After changes in commit a1bd627b46CVE-2022-508617.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Finish converting the NFSv2 GETACL result encoder The xdr_streamCVE-2022-50862In the Linux kernel, the following vulnerability has been resolved: bpf: prevent decl_tag from being referenced in func_proto Syzkaller waCVE-2022-50863In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: free unused skb to prevent memory leak This avoid potentiCVE-2022-50864In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds due to too large exponent of block sizeCVE-2022-508657.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() The type oCVE-2022-50866In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would CVE-2022-508677.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage adreno_show_object()
CVE-2022-50855: Unscored | Vulnix