CVE-2022-50661

A memory leak flaw was found in the Linux kernel's seccomp subsystem. When a process using seccomp filters is interrupted by a fatal signal during clone(), the seccomp_filter structure and associated BPF program memory are not properly freed. This occurs because copy_seccomp() is called before the fatal_signal_pending() check, leaving allocated resources unreleased on the error path.

Triggering this leak requires precise timing between signal delivery and clone() execution. While repeated exploitation could lead to memory exhaustion, practical impact is limited.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.