CVE-2022-50566 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.1%
top 75.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
In the Linux kernel, the following vulnerability has been resolved:
mtd: Fix device name leak when register device failed in add_mtd_device()
There is a kmemleak when register device failed:
unreferenced object 0xffff888101aab550 (size 8):
comm "insmod", pid 3922, jiffies 4295277753 (age 925.408s)
hex dump (first 8 bytes):
6d 74 64 30 00 88 ff ff mtd0....
backtrace:
[] __kmalloc_node_track_caller+0x4e/0x150
[] kvasprintf+0xb0/0x130
[] kobject_set_name_vargs+0x2f/0xb0
[] dev_set_name+0xab/0xe0
…
Affected Packages4 packages
▶CVEListV5linux/linux1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 — a75f45afa932bfb24a2603ebcea5efd2e7cdcfd6+9
🔴Vulnerability Details
3OSV▶
CVE-2022-50566: In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is↗2025-10-22
GHSA▶
GHSA-vc9x-p9c7-wp9p: In the Linux kernel, the following vulnerability has been resolved:
mtd: Fix device name leak when register device failed in add_mtd_device()
There↗2025-10-22