{"id":"DEBIAN-CVE-2022-50854","details":"In the Linux kernel, the following vulnerability has been resolved:  nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()  skb should be free in virtual_nci_send(), otherwise kmemleak will report memleak.  Steps for reproduction (simulated in qemu): \tcd tools/testing/selftests/nci \tmake \t./nci_dev  BUG: memory leak unreferenced object 0xffff888107588000 (size 208):   comm \"nci_dev\", pid 206, jiffies 4294945376 (age 368.248s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003c000000008d94c8fd\u003e] __alloc_skb+0x1da/0x290     [\u003c00000000278bc7f8\u003e] nci_send_cmd+0xa3/0x350     [\u003c0000000081256a22\u003e] nci_reset_req+0x6b/0xa0     [\u003c000000009e721112\u003e] __nci_request+0x90/0x250     [\u003c000000005d556e59\u003e] nci_dev_up+0x217/0x5b0     [\u003c00000000e618ce62\u003e] nfc_dev_up+0x114/0x220     [\u003c00000000981e226b\u003e] nfc_genl_dev_up+0x94/0xe0     [\u003c000000009bb03517\u003e] genl_family_rcv_msg_doit.isra.14+0x228/0x2d0     [\u003c00000000b7f8c101\u003e] genl_rcv_msg+0x35c/0x640     [\u003c00000000c94075ff\u003e] netlink_rcv_skb+0x11e/0x350     [\u003c00000000440cfb1e\u003e] genl_rcv+0x24/0x40     [\u003c0000000062593b40\u003e] netlink_unicast+0x43f/0x640     [\u003c000000001d0b13cc\u003e] netlink_sendmsg+0x73a/0xbf0     [\u003c000000003272487f\u003e] __sys_sendto+0x324/0x370     [\u003c00000000ef9f1747\u003e] __x64_sys_sendto+0xdd/0x1b0     [\u003c000000001e437841\u003e] do_syscall_64+0x3f/0x90","modified":"2026-09-01T20:05:01.457286295Z","published":"2025-12-30T13:16:00.117Z","upstream":["CVE-2022-50854"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50854"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50854.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50854.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50854.json"}}],"schema_version":"1.9.0"}