In the Linux kernel, the following vulnerability has been resolved:
selinux: fix memleak in securityreadstate_kernel()
In this function, it directly returns the result of __securityreadpolicy without freeing the allocated memory in *data, cause memory leak issue, so free the memory if __securityreadpolicy failed.
[PM: subject line tweak]
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50201.json",
"cna_assigner": "Linux"
}[
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"287869632845855350793622455695001889982",
"119411375892550125012116025650742607648",
"92090783552275829391078146231791839219",
"236477589988436475301098501109547158213",
"47087059416065549496166696895891451779",
"188714312944449050860934055589548552491"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-50201-0e66f3f7",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3cd7562c0a6774fc62d79654482014020e574f5",
"target": {
"file": "security/selinux/ss/services.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"287869632845855350793622455695001889982",
"119411375892550125012116025650742607648",
"92090783552275829391078146231791839219",
"236477589988436475301098501109547158213",
"47087059416065549496166696895891451779",
"188714312944449050860934055589548552491"
],
"threshold": 0.9
},
"id": "CVE-2022-50201-ee8e20c2",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c877c5217145bda8fd95f506bf42f8d981afa57d",
"target": {
"file": "security/selinux/ss/services.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50201.json"