Vulnerability in Linux

CVE-2022-50810

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing put_device in mport_cdev_open When kfifo_alloc fails, the refcount of chdev->dev is left incremental. We should use put_device(&chdev->dev) to decrease the ref count of chdev->dev to avoid refcount leak.

EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions e8de370188d098bb49483c287b44925957c3c9b6, 4.6, 0

References