CVE-2022-50352
published 2025-09-16CVE-2022-50352: In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: hns: fix possible memory leak in hnae_ae_register()
Inject fault while probing module, if device_register() fails,
but the refcount of kobject is not decreased to 0, the name
allocated in dev_set_name() is leaked. Fix this by calling
put_device(), so that name can be freed in callback function
kobject_cleanup().
unreferenced object 0xffff00c01aba2100 (size 128):
comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s)
hex dump (first 32 bytes):
68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] slab_post_alloc_hook+0xa0/0x3e0
[] __kmem_cache_alloc_node+0x164/0x2b0
[] __kmalloc_node_track_caller+0x6c/0x390
[] kvasprintf+0x8c/0x118
[] kvasprintf_const+0x60/0xc8
[] kobject_set_name_vargs+0x3c/0xc0
[] dev_set_name+0x7c/0xa0
[] hnae_ae_register+0xcc/0x190 [hnae]
[] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf]
[] hns_dsaf_probe+0x548/0x748 [hns_dsaf]
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.6-1 (bookworm) | linux 6.0.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < a3c148955c22fe1d94d7a2096005679c1f22eddf | a3c148955c22fe1d94d7a2096005679c1f22eddf |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < 3b78453cca046d3b03853f0d077ad3ad130db886 | 3b78453cca046d3b03853f0d077ad3ad130db886 |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < 7ae1345f6ad715acbcdc9e1ac28153684fd498bb | 7ae1345f6ad715acbcdc9e1ac28153684fd498bb |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < dfc0337c6dceb6449403b33ecb141f4a1458a1e9 | dfc0337c6dceb6449403b33ecb141f4a1458a1e9 |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < 2974f3b330ef25f5d34a4948d04290c2cd7802cf | 2974f3b330ef25f5d34a4948d04290c2cd7802cf |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < 91f8f5342bee726ed5692583d58f69e7cc9ae60e | 91f8f5342bee726ed5692583d58f69e7cc9ae60e |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < 02dc0db19d944b4a90941db505ecf1aaec714be4 | 02dc0db19d944b4a90941db505ecf1aaec714be4 |
| linux | linux | >= 6fe6611ff275522a4e4c0359e2f46cdd07780d2f < ff2f5ec5d009844ec28f171123f9e58750cef4bf | ff2f5ec5d009844ec28f171123f9e58750cef4bf |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.6-1 | 6.0.6-1 |
| linux | linux_kernel | >= 0 < 6.0.6-1 | 6.0.6-1 |
| linux | linux_kernel | >= 0 < 6.0.6-1 | 6.0.6-1 |
| linux | linux_kernel | >= 4.10 < 4.14.298 | 4.14.298 |
| linux | linux_kernel | >= 4.15 < 4.19.264 | 4.19.264 |
| linux | linux_kernel | >= 4.20 < 5.4.221 | 5.4.221 |
| linux | linux_kernel | >= 4.4 < 4.9.332 | 4.9.332 |
| linux | linux_kernel | >= 5.11 < 5.15.76 | 5.15.76 |
| linux | linux_kernel | >= 5.16 < 6.0.6 | 6.0.6 |
| linux | linux_kernel | >= 5.5 < 5.10.152 | 5.10.152 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50352: In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probin
osv·2025-09-16·CVSS 5.5
CVE-2022-50352 [MEDIUM] CVE-2022-50352: In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probin
In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module, if device_register() fails, but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). unreferenced object 0xffff00c01aba2100 (size 128): comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s) hex dump (first 32 bytes): 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!...... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] slab_post_alloc_hook+0xa0/0x3e0 [] __kmem_cache_alloc_node+0x164/0x2b0 [] __kmalloc_node_track_caller+0x6c/0x390 [] kvasprint
GHSA
GHSA-x55j-xpqj-9hr9: In the Linux kernel, the following vulnerability has been resolved:
net: hns: fix possible memory leak in hnae_ae_register()
Inject fault while prob
ghsa_unreviewed·2025-09-16
CVE-2022-50352 [MEDIUM] CWE-401 GHSA-x55j-xpqj-9hr9: In the Linux kernel, the following vulnerability has been resolved:
net: hns: fix possible memory leak in hnae_ae_register()
Inject fault while prob
In the Linux kernel, the following vulnerability has been resolved:
net: hns: fix possible memory leak in hnae_ae_register()
Inject fault while probing module, if device_register() fails,
but the refcount of kobject is not decreased to 0, the name
allocated in dev_set_name() is leaked. Fix this by calling
put_device(), so that name can be freed in callback function
kobject_cleanup().
unreferenced object 0xffff00c01aba2100 (size 128):
comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s)
hex dump (first 32 bytes):
68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] slab_post_alloc_hook+0xa0/0x3e0
[] __kmem_cache_alloc_node+0x164/0x2b0
[] __kmalloc_node_track_caller+0x6c/0x390
[] kvaspr
Red Hat
kernel: net: hns: fix possible memory leak in hnae_ae_register()
vendor_redhat·2025-09-16·CVSS 5.5
CVE-2022-50352 [MEDIUM] CWE-772 kernel: net: hns: fix possible memory leak in hnae_ae_register()
kernel: net: hns: fix possible memory leak in hnae_ae_register()
In the Linux kernel, the following vulnerability has been resolved:
net: hns: fix possible memory leak in hnae_ae_register()
Inject fault while probing module, if device_register() fails,
but the refcount of kobject is not decreased to 0, the name
allocated in dev_set_name() is leaked. Fix this by calling
put_device(), so that name can be freed in callback function
kobject_cleanup().
unreferenced object 0xffff00c01aba2100 (size 128):
comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s)
hex dump (first 32 bytes):
68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[] slab_post_alloc_hook+0xa0/0x3e0
[] __kmem_cache_alloc_node+
Debian
CVE-2022-50352: linux - In the Linux kernel, the following vulnerability has been resolved: net: hns: f...
vendor_debian·2022·CVSS 5.5
CVE-2022-50352 [MEDIUM] CVE-2022-50352: linux - In the Linux kernel, the following vulnerability has been resolved: net: hns: f...
In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module, if device_register() fails, but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is leaked. Fix this by calling put_device(), so that name can be freed in callback function kobject_cleanup(). unreferenced object 0xffff00c01aba2100 (size 128): comm "systemd-udevd", pid 1259, jiffies 4294903284 (age 294.152s) hex dump (first 32 bytes): 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!...... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] slab_post_alloc_hook+0xa0/0x3e0 [] __kmem_cache_alloc_node+0x164/0x2b0 [] __kmalloc_node_track_caller+0x6c/0x390 [] kvasprint
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/02dc0db19d944b4a90941db505ecf1aaec714be4https://git.kernel.org/stable/c/2974f3b330ef25f5d34a4948d04290c2cd7802cfhttps://git.kernel.org/stable/c/3b78453cca046d3b03853f0d077ad3ad130db886https://git.kernel.org/stable/c/7ae1345f6ad715acbcdc9e1ac28153684fd498bbhttps://git.kernel.org/stable/c/91f8f5342bee726ed5692583d58f69e7cc9ae60ehttps://git.kernel.org/stable/c/a3c148955c22fe1d94d7a2096005679c1f22eddfhttps://git.kernel.org/stable/c/dfc0337c6dceb6449403b33ecb141f4a1458a1e9https://git.kernel.org/stable/c/ff2f5ec5d009844ec28f171123f9e58750cef4bf
2025-09-16
Published