Memory Leak Vulnerability in Linux Kernel's Netdevsim Driver

CVE-2022-50500

What is CVE-2022-50500?

In the Linux Kernel, a vulnerability in the netdevsim driver has been identified that results in a memory leak when the nsim_dev_resources_register() function fails during initialization. This can cause memory resources to remain unreferenced, leading to potential degradation of system performance. Specifically, if certain items within the nsim_dev_resources_register() fail, it prevents the proper management of allocated memory, resulting in unfreed memory blocks that could accumulate over time, ultimately impacting system stability. Users are advised to apply the latest patches to mitigate this issue.

References