01 Record

CVE-2022-50396

net: sched: fix memory leak in tcindex_set_parms

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

net: sched: fix memory leak in tcindex_set_parms

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.17% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 6.8% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-18 13:33Z1 YR AGO

Last updated

2026-05-11 19:18Z5 MO AGO

Reserved

2025-09-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

9a47342301a0a3d15d62d542f667c81840f4294255029cb3fa3a38a6e1cb11e7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb9a24bb76bf611a5268ceffe04219e6ad264559b to < 53af9c793f644d5841d84d8e0ad83bd7ab47f3e0, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 01d0d2b8b4e3cf2110baba9371c0c3d04ad5c77b, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 55ac68b53f1cea1926ee2313afc5d66b91daad71, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 7a6fb69bbcb21e9ce13bdf18c008c268874f0480, b9a24bb76bf611a5268ceffe04219e6ad264559b to < b314f6c3512108d7a656c5caf07c82d1bbbdc0f1, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 18c3fa7a7fdbb4d21dafc8a7710ae2c1680930f6, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 6c55953e232ea668731091d111066521f3b7719b, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 7c183dc0af472dec33d2c0786a5e356baa8cad19, b9a24bb76bf611a5268ceffe04219e6ad264559b to < c4de6057e7c6654983acb63d939d26ac0d7bbf39, b9a24bb76bf611a5268ceffe04219e6ad264559b to < facc4405e8b7407e03216207b1d1d640127de0c8, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 3abebc503a5148072052c229c6b04b329a420ecd, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 399ab7fe0fa0d846881685fd4e57e9a8ef7559f7, b9a24bb76bf611a5268ceffe04219e6ad264559b to < 372ae77cf11d11fb118cbe2d37def9dd5f826abd, 4.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/53af9c793f644d5841d84d8e0ad83bd7ab47f3e0
git.kernel.orghttps://git.kernel.org/stable/c/01d0d2b8b4e3cf2110baba9371c0c3d04ad5c77b
git.kernel.orghttps://git.kernel.org/stable/c/55ac68b53f1cea1926ee2313afc5d66b91daad71
git.kernel.orghttps://git.kernel.org/stable/c/7a6fb69bbcb21e9ce13bdf18c008c268874f0480
git.kernel.orghttps://git.kernel.org/stable/c/b314f6c3512108d7a656c5caf07c82d1bbbdc0f1
git.kernel.orghttps://git.kernel.org/stable/c/18c3fa7a7fdbb4d21dafc8a7710ae2c1680930f6
git.kernel.orghttps://git.kernel.org/stable/c/6c55953e232ea668731091d111066521f3b7719b
git.kernel.orghttps://git.kernel.org/stable/c/7c183dc0af472dec33d2c0786a5e356baa8cad19
git.kernel.orghttps://git.kernel.org/stable/c/c4de6057e7c6654983acb63d939d26ac0d7bbf39
git.kernel.orghttps://git.kernel.org/stable/c/facc4405e8b7407e03216207b1d1d640127de0c8
git.kernel.orghttps://git.kernel.org/stable/c/3abebc503a5148072052c229c6b04b329a420ecd
git.kernel.orghttps://git.kernel.org/stable/c/399ab7fe0fa0d846881685fd4e57e9a8ef7559f7
git.kernel.orghttps://git.kernel.org/stable/c/372ae77cf11d11fb118cbe2d37def9dd5f826abd

07 Fixed in

Debian 12

linux
Fixed in 6.1.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.