CVE-2022-50500: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50500 is a memory leak vulnerability discovered in the Linux kernel's netdevsim driver. The issue occurs in the nsimdrvprobe() function when nsimdevresources_register() fails, leading to previously registered devlink resources not being properly unregistered (RedHat).

The vulnerability manifests as a memory leak in the netdevsim driver when nsimdevresources_register() fails partially through its execution. The issue involves an unreferenced object of size 128 bytes, identified at address 0xffff888074c02600. The vulnerability has been assigned a CVSS 3.1 base score of 4.4 (Low) with a vector string of CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (RedHat).

The vulnerability affects system availability by causing memory leaks. Since this is a local, privileged issue that requires root access to create/bind netdevsim via sysfs/devlink, the impact is limited to resource exhaustion through memory leaks (RedHat).

The vulnerability has been fixed in the Linux kernel through a patch that properly handles resource cleanup when nsimdevresources_register() fails. Various Linux distributions have incorporated this fix into their kernel updates (Ubuntu).