CVE-2022-50477Missing Release of Memory after Effective Lifetime in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: class: Fix potential memleak in devm_rtc_allocate_device() devm_rtc_allocate_device() will alloc a rtc_device first, and then run dev_set_name(). If dev_set_name() failed, the rtc_device will memleak. Move devm_add_action_or_reset() in front of dev_set_name() to prevent memleak. unreferenced object 0xffff888110a53000 (size 2048): comm "python3", pid 470, jiffies 4296078308 (age 58.882s) hex dump (first 32 bytes): 00 00 0

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel5.166.0.16+1
Debianlinux/linux_kernel< 6.1.4-1+2
CVEListV5linux/linux24d23181e43d72ca692a479e70dfe5b0b5dd33f10bcfc8fd3e596994f527b46730579428b3a4fa5f+3
debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-wq62-9p2f-cfr9: In the Linux kernel, the following vulnerability has been resolved: rtc: class: Fix potential memleak in devm_rtc_allocate_device() devm_rtc_allocat2025-10-04
OSV
CVE-2022-50477: In the Linux kernel, the following vulnerability has been resolved: rtc: class: Fix potential memleak in devm_rtc_allocate_device() devm_rtc_allocate_2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: rtc: class: Fix potential memleak in devm_rtc_allocate_device()2025-10-04
Debian
CVE-2022-50477: linux - In the Linux kernel, the following vulnerability has been resolved: rtc: class:...2022