Vulnerability in Linux

CVE-2022-50848

In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns error, the 'dev' and name needs be freed. Add a release function, and then call put_device() in the error path, so the name is freed in kobject_cleanup() and to the 'dev' is freed in release function.

EPSS: 0.002 (15.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 2e4c77bea3d8b17d94f8ee382411f359b708560f, 2.6.29, 0

References