CVE-2022-50391
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/09/2025
Last modified:
19/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/mempolicy: fix memory leak in set_mempolicy_home_node system call<br />
<br />
When encountering any vma in the range with policy other than MPOL_BIND or<br />
MPOL_PREFERRED_MANY, an error is returned without issuing a mpol_put on<br />
the policy just allocated with mpol_dup().<br />
<br />
This allows arbitrary users to leak kernel memory.