{
  "cveId": "CVE-2022-50854",
  "url": "https://patchblox.com/security/cve/CVE-2022-50854",
  "summary": "CVE-2022-50854 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50854, released December 30, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfc: virtual_ncidev: Fix memory leak in virtual_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()  skb should be free in virtual_nci_send(), otherwise kmemleak will report memleak.  Steps for reproduction (simulated in qemu): \tcd tools/testing/selftests/nci \tmake \t./nci_dev  BUG: memory leak unreferenced object 0xffff888107588000 (size 208):   comm \u0022nci_dev\u0022, pid 206, jiffies 4294945376 (age 368.248s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003C000000008d94c8fd\u003E] __alloc_skb\u002B0x1da/0x290     [\u003C00000000278bc7f8\u003E] nci_send_cmd\u002B0xa3/0x350     [\u003C0000000081256a22\u003E] nci_reset_req\u002B0x6b/0xa0     [\u003C000000009e721112\u003E] __nci_request\u002B0x90/0x250     [\u003C000000005d556e59\u003E] nci_dev_up\u002B0x217/0x5b0     [\u003C00000000e618ce62\u003E] nfc_dev_up\u002B0x114/0x220     [\u003C00000000981e226b\u003E] nfc_genl_dev_up\u002B0x94/0xe0     [\u003C000000009bb03517\u003E] genl_family_rcv_msg_doit.isra.14\u002B0x228/0x2d0     [\u003C00000000b7f8c101\u003E] genl_rcv_msg\u002B0x35c/0x640     [\u003C00000000c94075ff\u003E] netlink_rcv_skb\u002B0x11e/0x350     [\u003C00000000440cfb1e\u003E] genl_rcv\u002B0x24/0x40     [\u003C0000000062593b40\u003E] netlink_unicast\u002B0x43f/0x640     [\u003C000000001d0b13cc\u003E] netlink_sendmsg\u002B0x73a/0xbf0     [\u003C000000003272487f\u003E] __sys_sendto\u002B0x324/0x370     [\u003C00000000ef9f1747\u003E] __x64_sys_sendto\u002B0xdd/0x1b0     [\u003C000000001e437841\u003E] do_syscall_64\u002B0x3f/0x90",
  "published": "2025-12-30T13:16:00Z",
  "severity": "",
  "epss": 0.00199,
  "epssPercentile": 0.09754,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50854",
      "released": "2025-12-30T13:16:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50854",
      "released": "2025-12-30T13:16:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50854",
      "released": "2025-12-30T13:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}