<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 18:57:35 +0000</lastBuildDate>
    <item>
      <title>CVE-2022-50396 — net: sched: fix memory leak in tcindex_set_parms</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2022-50396</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;net: sched: fix memory leak in tcindex_set_parms&lt;/p&gt;
&lt;p&gt;Syzkaller reports a memory leak as follows:
====================================
BUG: memory leak
unreferenced object 0xffff88810c287f00 (size 256):
  comm &amp;#34;syz-executor105&amp;#34;, pid 3600, jiffies 4294943292 (age 12.990s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [&amp;lt;ffffffff814cf9f0&amp;gt;] kmalloc_trace+0x20/0x90 mm/slab_common.c:1046
    [&amp;lt;ffffffff839c9e07&amp;gt;] kmalloc include/linux/slab.h:576 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] kmalloc_array include/linux/slab.h:627 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] kcalloc include/linux/slab.h:659 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] tcf_exts_init include/net/pkt_cls.h:250 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] tcindex_set_parms+0xa7/0xbe0 net/sched/cls_tcindex.c:342
    [&amp;lt;ffffffff839caa1f&amp;gt;] tcindex_change+0xdf/0x120 net/sched/cls_tcindex.c:553
    [&amp;lt;ffffffff8394db62&amp;gt;] tc_new_tfilter+0x4f2/0x1100 net/sched/cls_api.c:2147
    [&amp;lt;ffffffff8389e91c&amp;gt;] rtnetlink_rcv_msg+0x4dc/0x5d0 net/core/rtnetlink.c:6082
    [&amp;lt;ffffffff839eba67&amp;gt;] netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2540
    [&amp;lt;ffffffff839eab87&amp;gt;] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
    [&amp;lt;ffffffff839eab87&amp;gt;] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345
    [&amp;lt;ffffffff839eb046&amp;gt;] netlink_sendmsg+0x396/0x710 net…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;net: sched: fix memory leak in tcindex_set_parms&lt;/p&gt;
&lt;p&gt;Syzkaller reports a memory leak as follows:
====================================
BUG: memory leak
unreferenced object 0xffff88810c287f00 (size 256):
  comm &amp;#34;syz-executor105&amp;#34;, pid 3600, jiffies 4294943292 (age 12.990s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [&amp;lt;ffffffff814cf9f0&amp;gt;] kmalloc_trace+0x20/0x90 mm/slab_common.c:1046
    [&amp;lt;ffffffff839c9e07&amp;gt;] kmalloc include/linux/slab.h:576 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] kmalloc_array include/linux/slab.h:627 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] kcalloc include/linux/slab.h:659 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] tcf_exts_init include/net/pkt_cls.h:250 [inline]
    [&amp;lt;ffffffff839c9e07&amp;gt;] tcindex_set_parms+0xa7/0xbe0 net/sched/cls_tcindex.c:342
    [&amp;lt;ffffffff839caa1f&amp;gt;] tcindex_change+0xdf/0x120 net/sched/cls_tcindex.c:553
    [&amp;lt;ffffffff8394db62&amp;gt;] tc_new_tfilter+0x4f2/0x1100 net/sched/cls_api.c:2147
    [&amp;lt;ffffffff8389e91c&amp;gt;] rtnetlink_rcv_msg+0x4dc/0x5d0 net/core/rtnetlink.c:6082
    [&amp;lt;ffffffff839eba67&amp;gt;] netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2540
    [&amp;lt;ffffffff839eab87&amp;gt;] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
    [&amp;lt;ffffffff839eab87&amp;gt;] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345
    [&amp;lt;ffffffff839eb046&amp;gt;] netlink_sendmsg+0x396/0x710 net…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2022-50396</guid>
    </item>
  </channel>
</rss>
