Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]xfrm: fix refcount leak in __xfrm_policy_check()[EOL][EOL]The issue happens on an error path in __xfrm_policy_check(). When the[EOL]fetching process of the object `pols[1]` fails, the function simply[EOL]returns 0, forgetting to decrement the reference count of `pols[0]`,[EOL]which is incremented earlier by either xfrm_sk_policy_lookup() or[EOL]xfrm_policy_lookup(). This may result in memory leaks.[EOL][EOL]Fix it by decreasing the reference count of `pols[0]` in that path.

CREATE(Triage):(User=lchen-cn) [CVE-2022-50007 (https://nvd.nist.gov/vuln/detail/CVE-2022-50007)