NetSight
high7.8

CVE-2022-50252

In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condi…

Impact

In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.337
from 4.10 before 4.14.303
from 4.15 before 4.19.270
from 4.20 before 5.4.229
from 5.5 before 5.10.163
from 5.11 before 5.15.86

Weakness classification

References