CVE-2022-50252

In the Linux kernel, the following vulnerability has been resolved:

igb: Do not free q_vector unless new one was allocated

Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v_idx] array position.

The patch addresses a potential use-after-free in the Intel igb driver during q_vector reallocation under memory pressure. The issue occurs if kzalloc() fails while resizing q_vector. Exploitation is highly impractical, as it requires local root privileges and artificial OOM conditions. The impact is limited to a possible driver crash (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.