CVE-2022-50201: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50201 is a vulnerability discovered in the Linux kernel affecting the SELinux component. The issue was identified in June 2025 and affects the securityreadstatekernel() function. The vulnerability specifically involves a memory leak condition where the function fails to properly free allocated memory when _securityreadpolicy fails (NVD CVE, Wiz Report).

The vulnerability exists in the SELinux subsystem of the Linux kernel. The securityreadstatekernel() function directly returns the result of _securityreadpolicy without freeing the allocated memory in *data variable, leading to a memory leak condition when _securityread_policy fails (NVD CVE, Debian Tracker).

The primary impact of this vulnerability is a memory leak in the Linux kernel's SELinux component. While memory leaks can potentially lead to resource exhaustion over time, the immediate impact appears to be limited to system resource consumption (Wiz Report).

The vulnerability has been resolved in the Linux kernel through a patch that ensures proper memory deallocation. The fix involves freeing the memory if _securityread_policy fails, preventing the memory leak condition. Fixed versions are available in Debian bookworm (6.1.137-1) and later releases (Debian Tracker, Wiz Report).