CVE-2022-50343
published 2025-09-16CVE-2022-50343: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio: fix…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible name leaks when rio_add_device() fails
Patch series "rapidio: fix three possible memory leaks".
This patchset fixes three name leaks in error handling.
- patch #1 fixes two name leaks while rio_add_device() fails.
- patch #2 fixes a name leak while rio_register_mport() fails.
This patch (of 2):
If rio_add_device() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and the
'rdev' can be freed in rio_release_dev().
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 3b4676f274a6b5d001176f15d0542100bbf4b59a | 3b4676f274a6b5d001176f15d0542100bbf4b59a |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c482cb0deb57924335103fe592c379a076d867f8 | c482cb0deb57924335103fe592c379a076d867f8 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 80fad2e53eaed2b3a2ff596575f65669e13ceda5 | 80fad2e53eaed2b3a2ff596575f65669e13ceda5 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8 | 440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 88fa351b20ca300693a206ccd3c4b0e0647944d8 | 88fa351b20ca300693a206ccd3c4b0e0647944d8 |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ec3f04f74f50d0b6bac04d795c93c2b852753a7a | ec3f04f74f50d0b6bac04d795c93c2b852753a7a |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c413f65011ff8caffabcde0e1c3ceede48a48d6f | c413f65011ff8caffabcde0e1c3ceede48a48d6f |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 85fbf58b15c09d3a6a03098c1e42ebfe9002f39d | 85fbf58b15c09d3a6a03098c1e42ebfe9002f39d |
| linux | linux | >= 1fa5ae857bb14f6046205171d98506d8112dd74e < f9574cd48679926e2a569e1957a5a1bcc8a719ac | f9574cd48679926e2a569e1957a5a1bcc8a719ac |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.30 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50343: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio
osv·2025-09-16·CVSS 5.5
CVE-2022-50343 [MEDIUM] CVE-2022-50343: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio: fix three possible memory leaks". This patchset fixes three name leaks in error handling. - patch #1 fixes two name leaks while rio_add_device() fails. - patch #2 fixes a name leak while rio_register_mport() fails. This patch (of 2): If rio_add_device() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and the 'rdev' can be freed in rio_release_dev().
GHSA
GHSA-q25c-43pj-xx2h: In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible name leaks when rio_add_device() fails
Patch series "rapid
ghsa_unreviewed·2025-09-16
CVE-2022-50343 [MEDIUM] CWE-401 GHSA-q25c-43pj-xx2h: In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible name leaks when rio_add_device() fails
Patch series "rapid
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible name leaks when rio_add_device() fails
Patch series "rapidio: fix three possible memory leaks".
This patchset fixes three name leaks in error handling.
- patch #1 fixes two name leaks while rio_add_device() fails.
- patch #2 fixes a name leak while rio_register_mport() fails.
This patch (of 2):
If rio_add_device() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and the
'rdev' can be freed in rio_release_dev().
Red Hat
kernel: rapidio: fix possible name leaks when rio_add_device() fails
vendor_redhat·2025-09-16·CVSS 5.5
CVE-2022-50343 [MEDIUM] kernel: rapidio: fix possible name leaks when rio_add_device() fails
kernel: rapidio: fix possible name leaks when rio_add_device() fails
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible name leaks when rio_add_device() fails
Patch series "rapidio: fix three possible memory leaks".
This patchset fixes three name leaks in error handling.
- patch #1 fixes two name leaks while rio_add_device() fails.
- patch #2 fixes a name leak while rio_register_mport() fails.
This patch (of 2):
If rio_add_device() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and the
'rdev' can be freed in rio_release_dev().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red
Debian
CVE-2022-50343: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: fi...
vendor_debian·2022·CVSS 5.5
CVE-2022-50343 [MEDIUM] CVE-2022-50343: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: fi...
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio: fix three possible memory leaks". This patchset fixes three name leaks in error handling. - patch #1 fixes two name leaks while rio_add_device() fails. - patch #2 fixes a name leak while rio_register_mport() fails. This patch (of 2): If rio_add_device() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and the 'rdev' can be freed in rio_release_dev().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3b4676f274a6b5d001176f15d0542100bbf4b59ahttps://git.kernel.org/stable/c/440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8https://git.kernel.org/stable/c/80fad2e53eaed2b3a2ff596575f65669e13ceda5https://git.kernel.org/stable/c/85fbf58b15c09d3a6a03098c1e42ebfe9002f39dhttps://git.kernel.org/stable/c/88fa351b20ca300693a206ccd3c4b0e0647944d8https://git.kernel.org/stable/c/c413f65011ff8caffabcde0e1c3ceede48a48d6fhttps://git.kernel.org/stable/c/c482cb0deb57924335103fe592c379a076d867f8https://git.kernel.org/stable/c/ec3f04f74f50d0b6bac04d795c93c2b852753a7ahttps://git.kernel.org/stable/c/f9574cd48679926e2a569e1957a5a1bcc8a719ac
2025-09-16
Published