CVE-2022-50855

A reference count leak was found in the BPF subsystem. When attaching a BPF LSM program to a cgroup fails validation, the program's reference count is not decremented, causing the BPF program to remain loaded indefinitely.

This requires CAP_BPF or CAP_SYS_ADMIN to trigger, as loading BPF programs is a privileged operation. The leak accumulates memory over repeated failed attach attempts but does not provide privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.