CVE-2022-50065
published 2025-06-18CVE-2022-50065: In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable
When we call xdp_convert_buff_to_frame() to get xdpf, if it returns
NULL, we should check if xdp_page was allocated by xdp_linearize_page().
If it is newly allocated, it should be freed here alone. Just like any
other "goto err_xdp".
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < faafa2a87f697ee537c29446097e1cc3143506fa | faafa2a87f697ee537c29446097e1cc3143506fa |
| linux | linux | >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < d3723eab11196475ef83279571b2b0bd0924cf82 | d3723eab11196475ef83279571b2b0bd0924cf82 |
| linux | linux | >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 18e383afbd7047af7b055df6e25436e0ce28f8a5 | 18e383afbd7047af7b055df6e25436e0ce28f8a5 |
| linux | linux | >= 44fa2dbd475996ddc8f3a0e6113dee983e0ee3aa < 7a542bee27c6a57e45c33cbbdc963325fd6493af | 7a542bee27c6a57e45c33cbbdc963325fd6493af |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.18 < 5.10.138 | 5.10.138 |
| linux | linux_kernel | >= 5.11 < 5.15.63 | 5.15.63 |
| linux | linux_kernel | >= 5.16 < 5.19.4 | 5.19.4 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pm77-qrwm-74j5: In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable
When we call xdp_conver
ghsa_unreviewed·2025-06-18
CVE-2022-50065 [MEDIUM] CWE-401 GHSA-pm77-qrwm-74j5: In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable
When we call xdp_conver
In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable
When we call xdp_convert_buff_to_frame() to get xdpf, if it returns
NULL, we should check if xdp_page was allocated by xdp_linearize_page().
If it is newly allocated, it should be freed here alone. Just like any
other "goto err_xdp".
OSV
CVE-2022-50065: In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_
osv·2025-06-18·CVSS 5.5
CVE-2022-50065 [MEDIUM] CVE-2022-50065: In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_
In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_buff_to_frame() to get xdpf, if it returns NULL, we should check if xdp_page was allocated by xdp_linearize_page(). If it is newly allocated, it should be freed here alone. Just like any other "goto err_xdp".
Red Hat
kernel: virtio_net: fix memory leak inside XPD_TX with mergeable
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50065 [MEDIUM] kernel: virtio_net: fix memory leak inside XPD_TX with mergeable
kernel: virtio_net: fix memory leak inside XPD_TX with mergeable
In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable
When we call xdp_convert_buff_to_frame() to get xdpf, if it returns
NULL, we should check if xdp_page was allocated by xdp_linearize_page().
If it is newly allocated, it should be freed here alone. Just like any
other "goto err_xdp".
Statement: A memory leak may occur in the virtio_net driver when handling the XDP_TX action with mergeable buffers. If xdp_convert_buff_to_frame() fails and returns NULL, and the XDP page was previously allocated via xdp_linearize_page(), the memory is not properly released. The impact is limited to a minor memory leak under specific error conditions, requiring XDP progra
Debian
CVE-2022-50065: linux - In the Linux kernel, the following vulnerability has been resolved: virtio_net:...
vendor_debian·2022·CVSS 5.5
CVE-2022-50065 [MEDIUM] CVE-2022-50065: linux - In the Linux kernel, the following vulnerability has been resolved: virtio_net:...
In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_buff_to_frame() to get xdpf, if it returns NULL, we should check if xdp_page was allocated by xdp_linearize_page(). If it is newly allocated, it should be freed here alone. Just like any other "goto err_xdp".
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
No detection rules found.
No public exploits indexed.
2025-06-18
Published