CVE-2022-50855
Published: Dec 30, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In [0], we added the ability to bpf_prog_attach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPF_LSM_CGROUP, we return too early if the check fails. This results in lack of decrementing prog's refcnt (through bpf_prog_put) leaving the LSM program alive past the point of the expected lifecycle. This fix allows for the decrement to take place. [0] https://lore.kernel.org/all/[email protected]/
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e - < 82b39df5ddb298daaf6dc504032ff7eb027fa106affected 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e - < 6a1504dd36cd9a0a69250d61da8bdb17b29f1fe8affected 69fd337a975c7e690dfe49d9cb4fe5ba1e6db44e - < e89f3edffb860a0f54a9ed16deadb7a4a1fa3862 |
Linux | Linux | affected 6.0unaffected 0 - < 6.0unaffected 6.0.16 - <= 6.0.*unaffected 6.1.2 - <= 6.1.*unaffected 6.2 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now