Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]net: fix potential refcount leak in ndisc_router_discovery()[EOL][EOL]The issue happens on specific paths in the function. After both the[EOL]object `rt` and `neigh` are grabbed successfully, when `lifetime` is[EOL]nonzero but the metric needs change, the function just deletes the[EOL]route and set `rt` to NULL. Then, it may try grabbing `rt` and `neigh`[EOL]again if above conditions hold. The function simply overwrite `neigh`[EOL]if succeeds or returns if fails, without decreasing the reference[EOL]count of previous `neigh`. This may result in memory leaks.[EOL][EOL]Fix it by decrementing the reference count of `neigh` in place.

CREATE(Triage):(User=lchen-cn) [CVE-2022-50043 (https://nvd.nist.gov/vuln/detail/CVE-2022-50043)