Back
CVE-2022-50252
igb: Do not free q_vector unless new one was allocated
High7.8EPSS 0.17%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.17% · top 94% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 64ca1969599857143e91aeec4440640656100803
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 0200f0fbb11e359cc35af72ab10b2ec224e6f633
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 68e8adbcaf7a8743e473343b38b9dad66e2ac6f3
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < f96bd8adc8adde25390965a8c1ee81b73cb62075
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 3cb18dea11196fb4a06f78294cec5e61985e1aff
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 314f7092b27749bdde44c14095b5533afa2a3bc8
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 6e399577bd397a517df4b938601108c63769ce0a
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 56483aecf6b22eb7dff6315b3a174688c6ad494c
- affected 72ddef0506da852dc82f078f37ced8ef4d74a2bf – < 0668716506ca66f90d395f36ccdaebc3e0e84801
- affected 5be042b1917ddf444c20f4e12856535307b37c01
- affected a0e26ed623a1e1460c1a191fbc0f37bddab7851a
- affected f4b7f93cd34a6153d454a837708fd4203990d1ae
- affected 3.18.23 – < 3.19
- affected 4.1.9 – < 4.2
- affected 4.2.2 – < 4.3
- affected 4.3
- unaffected < 4.3
- unaffected 4.9.337 – ≤ 4.9.*
- unaffected 4.14.303 – ≤ 4.14.*
- unaffected 4.19.270 – ≤ 4.19.*
- unaffected 5.4.229 – ≤ 5.4.*
- unaffected 5.10.163 – ≤ 5.10.*
- unaffected 5.15.86 – ≤ 5.15.*
- unaffected 6.0.16 – ≤ 6.0.*
- unaffected 6.1.2 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References (9)
- https://git.kernel.org/stable/c/64ca1969599857143e91aeec4440640656100803 (opens in a new tab)
- https://git.kernel.org/stable/c/0200f0fbb11e359cc35af72ab10b2ec224e6f633 (opens in a new tab)
- https://git.kernel.org/stable/c/68e8adbcaf7a8743e473343b38b9dad66e2ac6f3 (opens in a new tab)
- https://git.kernel.org/stable/c/f96bd8adc8adde25390965a8c1ee81b73cb62075 (opens in a new tab)
- https://git.kernel.org/stable/c/3cb18dea11196fb4a06f78294cec5e61985e1aff (opens in a new tab)
- https://git.kernel.org/stable/c/314f7092b27749bdde44c14095b5533afa2a3bc8 (opens in a new tab)
- https://git.kernel.org/stable/c/6e399577bd397a517df4b938601108c63769ce0a (opens in a new tab)
- https://git.kernel.org/stable/c/56483aecf6b22eb7dff6315b3a174688c6ad494c (opens in a new tab)
- https://git.kernel.org/stable/c/0668716506ca66f90d395f36ccdaebc3e0e84801 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50252)Record last updated .