CVE-2022-50352
—In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module, if device_register() fails, but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). unreferenced object 0xffff00c01aba2100 (size 128): comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s) hex dump (first 32 bytes): 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!...... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [ ] slab_post_alloc_hook+0xa0/0x3e0 [ ] __kmem_cache_alloc_node+0x164/0x2b0 [ ] __kmalloc_node_track_caller+0x6c/0x390 [ ] kvasprintf+0x8c/0x118 [ ] kvasprintf_const+0x60/0xc8 [ ] kobject_set_name_vargs+0x3c/0xc0 [ ] dev_set_name+0x7c/0xa0 [ ] hnae_ae_register+0xcc/0x190 [hnae] [ ] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf] [ ] hns_dsaf_probe+0x548/0x748 [hns_dsaf]
- Vendors
- linux
- Products
- linux kernel
- Weakness
- CWE-401
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.