CVE-2022-50837: net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path If dsa_tag_8021q_setup() fails, for example due to the inability of the device to install a VLAN, the tag_8021q context of the switch will leak. Make sure it is freed on the error path.

Affected products

Linux kernel: 5.15 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/09f30f394e832ed09859b6a80fdd20668a9104ff
https://git.kernel.org/stable/c/14ed46a13aba42a6ddd85de6f6274090df3586a5
https://git.kernel.org/stable/c/39691d51af99f80efb9e365f94b8e0c791fa1a2f
https://git.kernel.org/stable/c/e095493091e850d5292ad01d8fbf5cde1d89ac53

Get alerted when CVE-2022-50837 or the next vulnerability affects your stack