CVE-2022-50259

CVE-2022-50259 : In the Linux kernel, the bpf sock_map_free() path can trigger use-after-free because sock_map_free() calls release_sock(sk) without holding a socket reference. This race is evidenced by syzbot tracing and mirrors a related issue fixed in sock_hash_free() (commit referenced). The ...