ZeroHour

CVE-2022-50566

CVSS
EPSS
<1%p14
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is a kmemleak when register device failed: unreferenced object 0xffff888101aab550 (size 8): comm "insmod", pid 3922, jiffies 4295277753 (age 925.408s) hex dump (first 8 bytes): 6d 74 64 30 00 88 ff ff mtd0.... backtrace: [ ] __kmalloc_node_track_caller+0x4e/0x150 [ ] kvasprintf+0xb0/0x130 [ ] kobject_set_name_vargs+0x2f/0xb0 [ ] dev_set_name+0xab/0xe0 [ ] add_mtd_device+0x4bb/0x700 [ ] mtd_device_parse_register+0x2ac/0x3f0 [ ] 0xffffffffa0238457 [ ] 0xffffffffa02a008f [ ] do_one_initcall+0x87/0x2a0 [ ] do_init_module+0xdf/0x320 [ ] load_module+0x2f98/0x3330 [ ] __do_sys_finit_module+0x113/0x1b0 [ ] do_syscall_64+0x35/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x46/0xb0 If register device failed, should call put_device() to give up the reference.

In the news

No ingested article mentions this CVE yet.