CVE-2022-50854
- Published: 2025-12-30T13:16:00.117
In the Linux kernel, the following vulnerability has been resolved:
nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()
skb should be free in virtual_nci_send(), otherwise kmemleak will report
memleak.
Steps for reproduction (simulated in qemu):
cd tools/testing/selftests/nci
make
./nci_dev
BUG: memory leak
unreferenced object 0xffff888107588000 (size 208):
comm “nci_dev”, pid 206, jiffies 4294945376 (age 368.248s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 …………….
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 …………….
backtrace:
[] __alloc_skb+0x1da/0x290
[] nci_send_cmd+0xa3/0x350
[] nci_reset_req+0x6b/0xa0
[] __nci_request+0x90/0x250
[] nci_dev_up+0x217/0x5b0
[] nfc_dev_up+0x114/0x220
[] nfc_genl_dev_up+0x94/0xe0
[] genl_family_rcv_msg_doit.isra.14+0x228/0x2d0
[] genl_rcv_msg+0x35c/0x640
[] netlink_rcv_skb+0x11e/0x350
[] genl_rcv+0x24/0x40
[] netlink_unicast+0x43f/0x640
[] netlink_sendmsg+0x73a/0xbf0
[] __sys_sendto+0x324/0x370
[] __x64_sys_sendto+0xdd/0x1b0
[] do_syscall_64+0x3f/0x90
Related CVE by CWE
No related CWE found.
Top CVE for Vendor
No vendor taxonomy on this entry.
Recently Exploited Similar Vulnerabilities
No recent KEV-listed items for this vendor/product.
How to fix CVE-2022-50854
Description: In the Linux kernel, the following vulnerability has been resolved: nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() skb should be free in virtual_nci_send(), otherwise kmemleak will report memleak. Steps for reproduction (simulated in qemu): cd tools/testing/selftests/nci make ./nci_dev BUG: memory leak unreferenced object 0xffff888107588000 (size 208): comm “nci_dev”, pid 206, jiffies 4294945376 (age 368.248s) hex […]
Exploit Difficulty: HARD
⏱️ Time to exploit: > 4 hours
🛠️ Required skills: Advanced security expertise
💰 Public exploits: Rare or not public
How to Fix:
- Check if you're running the affected product
- Update to the latest patched version
- If patching is not immediately possible: restrict network exposure, apply least-privilege access
- Test the fix in a staging environment first
- Review logs for signs of exploitation
- Monitor for IOCs (Indicators of Compromise)
- Enable automatic security updates
- Set up vulnerability monitoring
- Review and harden security configurations
Exploit Difficulty Assessment
Vulnerability Timeline
CVE details first published to NVD database
Added to this CVE tracking system
Detection Rules & IOCs
No specific detection rules generated for this vulnerability type.
No vendor/product data available.