CVE-2022-50855 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In [0], we added the ability to bpf_prog_attach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPF_LSM_CGROUP, we return too early if the check fails. This results in lack of decrementing prog's refcnt (through bpf_prog_put) leaving the LSM program alive past the point of the expected lifecycle. This fix allows for the decrement to take place. [0] https://lore.kernel.org/all/[email protected]/
A vulnerability in the Linux kernel's handling of BPF LSM (Linux Security Module) programs attached to control groups (cgroups) has been addressed. The issue arose because the validation process for attaching BPF LSM programs to cgroups returned too early when a program was not meant to be attached, leading to a failure to decrement the program's reference count. This oversight allowed the LSM program to remain active longer than intended, disrupting its expected lifecycle. The recent fix ensures that the reference count is properly managed, preventing such leaks.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The patched version can be downloaded from the Linux kernel's official repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/6a1504dd36cd9a0a69250d61da8bdb17b29f1fe8 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/82b39df5ddb298daaf6dc504032ff7eb027fa106 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e89f3edffb860a0f54a9ed16deadb7a4a1fa3862 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |