CVE-2022-50252
published 2025-09-15CVE-2022-50252: In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
5.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
igb: Do not free q_vector unless new one was allocated
Avoid potential use-after-free condition under memory pressure. If the
kzalloc() fails, q_vector will be freed but left in the original
adapter->q_vector[v_idx] array position.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 3.18.23 < 3.19 | 3.19 |
| linux | linux | >= 4.1.9 < 4.2 | 4.2 |
| linux | linux | >= 4.2.2 < 4.3 | 4.3 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 64ca1969599857143e91aeec4440640656100803 | 64ca1969599857143e91aeec4440640656100803 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 0200f0fbb11e359cc35af72ab10b2ec224e6f633 | 0200f0fbb11e359cc35af72ab10b2ec224e6f633 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 68e8adbcaf7a8743e473343b38b9dad66e2ac6f3 | 68e8adbcaf7a8743e473343b38b9dad66e2ac6f3 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < f96bd8adc8adde25390965a8c1ee81b73cb62075 | f96bd8adc8adde25390965a8c1ee81b73cb62075 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 3cb18dea11196fb4a06f78294cec5e61985e1aff | 3cb18dea11196fb4a06f78294cec5e61985e1aff |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 314f7092b27749bdde44c14095b5533afa2a3bc8 | 314f7092b27749bdde44c14095b5533afa2a3bc8 |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 6e399577bd397a517df4b938601108c63769ce0a | 6e399577bd397a517df4b938601108c63769ce0a |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 56483aecf6b22eb7dff6315b3a174688c6ad494c | 56483aecf6b22eb7dff6315b3a174688c6ad494c |
| linux | linux | >= 72ddef0506da852dc82f078f37ced8ef4d74a2bf < 0668716506ca66f90d395f36ccdaebc3e0e84801 | 0668716506ca66f90d395f36ccdaebc3e0e84801 |
| linux | linux_kernel | < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50252: In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-f
osv·2025-09-15·CVSS 7.8
CVE-2022-50252 [HIGH] CVE-2022-50252: In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-f
In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.
GHSA
GHSA-cp87-76w4-mfxp: In the Linux kernel, the following vulnerability has been resolved:
igb: Do not free q_vector unless new one was allocated
Avoid potential use-after
ghsa_unreviewed·2025-09-15
CVE-2022-50252 [HIGH] CWE-416 GHSA-cp87-76w4-mfxp: In the Linux kernel, the following vulnerability has been resolved:
igb: Do not free q_vector unless new one was allocated
Avoid potential use-after
In the Linux kernel, the following vulnerability has been resolved:
igb: Do not free q_vector unless new one was allocated
Avoid potential use-after-free condition under memory pressure. If the
kzalloc() fails, q_vector will be freed but left in the original
adapter->q_vector[v_idx] array position.
Red Hat
kernel: igb: Do not free q_vector unless new one was allocated
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2022-50252 [HIGH] CWE-416 kernel: igb: Do not free q_vector unless new one was allocated
kernel: igb: Do not free q_vector unless new one was allocated
In the Linux kernel, the following vulnerability has been resolved:
igb: Do not free q_vector unless new one was allocated
Avoid potential use-after-free condition under memory pressure. If the
kzalloc() fails, q_vector will be freed but left in the original
adapter->q_vector[v_idx] array position.
Statement: The patch addresses a potential use-after-free in the Intel igb driver during q_vector reallocation under memory pressure. The issue occurs if kzalloc() fails while resizing q_vector.
Exploitation is highly impractical, as it requires local root privileges and artificial OOM conditions. The impact is limited to a possible driver crash (DoS).
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (
Debian
CVE-2022-50252: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Do not...
vendor_debian·2022·CVSS 7.8
CVE-2022-50252 [HIGH] CVE-2022-50252: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Do not...
In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0200f0fbb11e359cc35af72ab10b2ec224e6f633https://git.kernel.org/stable/c/0668716506ca66f90d395f36ccdaebc3e0e84801https://git.kernel.org/stable/c/314f7092b27749bdde44c14095b5533afa2a3bc8https://git.kernel.org/stable/c/3cb18dea11196fb4a06f78294cec5e61985e1affhttps://git.kernel.org/stable/c/56483aecf6b22eb7dff6315b3a174688c6ad494chttps://git.kernel.org/stable/c/64ca1969599857143e91aeec4440640656100803https://git.kernel.org/stable/c/68e8adbcaf7a8743e473343b38b9dad66e2ac6f3https://git.kernel.org/stable/c/6e399577bd397a517df4b938601108c63769ce0ahttps://git.kernel.org/stable/c/f96bd8adc8adde25390965a8c1ee81b73cb62075
2025-09-15
Published