CVE-2022-50278
published 2025-09-15CVE-2022-50278: In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
PNP: fix name memory leak in pnp_alloc_dev()
After commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
move dev_set_name() after pnp_add_id() to avoid memory leak.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ea77b4b761cd75e5456f677311babfa0418f289a | ea77b4b761cd75e5456f677311babfa0418f289a |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa | 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < bbcf772216aa237036cc3ae3158288d0a95aaf4d | bbcf772216aa237036cc3ae3158288d0a95aaf4d |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 81b024df4755e6bb6993b786584eca6eabbb9791 | 81b024df4755e6bb6993b786584eca6eabbb9791 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < dac87e295cddc8ab316cff14ab2071b5221d84fa | dac87e295cddc8ab316cff14ab2071b5221d84fa |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c12b314bb23dc0c83e03402cc84574700947e3b2 | c12b314bb23dc0c83e03402cc84574700947e3b2 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 1f50c7497a5f89de0c31f2edf086af41ff834320 | 1f50c7497a5f89de0c31f2edf086af41ff834320 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 290dd73b943c95c006df973257076ff163adf4d0 | 290dd73b943c95c006df973257076ff163adf4d0 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 110d7b0325c55ff3620073ba4201845f59e22ebf | 110d7b0325c55ff3620073ba4201845f59e22ebf |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.30 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: PNP: fix name memory leak in pnp_alloc_dev()
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50278 [MEDIUM] CWE-772 kernel: PNP: fix name memory leak in pnp_alloc_dev()
kernel: PNP: fix name memory leak in pnp_alloc_dev()
In the Linux kernel, the following vulnerability has been resolved:
PNP: fix name memory leak in pnp_alloc_dev()
After commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
move dev_set_name() after pnp_add_id() to avoid memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 9) - Fix def
Debian
CVE-2022-50278: linux - In the Linux kernel, the following vulnerability has been resolved: PNP: fix na...
vendor_debian·2022·CVSS 5.5
CVE-2022-50278 [MEDIUM] CVE-2022-50278: linux - In the Linux kernel, the following vulnerability has been resolved: PNP: fix na...
In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp_add_id() to avoid memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-fj56-2h43-2hcw: In the Linux kernel, the following vulnerability has been resolved:
PNP: fix name memory leak in pnp_alloc_dev()
After commit 1fa5ae857bb1 ("driver
ghsa_unreviewed·2025-09-15
CVE-2022-50278 [MEDIUM] CWE-401 GHSA-fj56-2h43-2hcw: In the Linux kernel, the following vulnerability has been resolved:
PNP: fix name memory leak in pnp_alloc_dev()
After commit 1fa5ae857bb1 ("driver
In the Linux kernel, the following vulnerability has been resolved:
PNP: fix name memory leak in pnp_alloc_dev()
After commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
move dev_set_name() after pnp_add_id() to avoid memory leak.
OSV
CVE-2022-50278: In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver co
osv·2025-09-15·CVSS 5.5
CVE-2022-50278 [MEDIUM] CVE-2022-50278: In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver co
In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp_add_id() to avoid memory leak.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/110d7b0325c55ff3620073ba4201845f59e22ebfhttps://git.kernel.org/stable/c/1f50c7497a5f89de0c31f2edf086af41ff834320https://git.kernel.org/stable/c/290dd73b943c95c006df973257076ff163adf4d0https://git.kernel.org/stable/c/693a0c13c1f0c0fcaa1e38cb806cc0789bd415aahttps://git.kernel.org/stable/c/81b024df4755e6bb6993b786584eca6eabbb9791https://git.kernel.org/stable/c/bbcf772216aa237036cc3ae3158288d0a95aaf4dhttps://git.kernel.org/stable/c/c12b314bb23dc0c83e03402cc84574700947e3b2https://git.kernel.org/stable/c/dac87e295cddc8ab316cff14ab2071b5221d84fahttps://git.kernel.org/stable/c/ea77b4b761cd75e5456f677311babfa0418f289a
2025-09-15
Published