cbcvebase.
CVE-2022-50566
published 2025-10-22

CVE-2022-50566: In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is a…

PriorityP420low5.5
EPSS
0.23%
14.4th percentile
In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is a kmemleak when register device failed: unreferenced object 0xffff888101aab550 (size 8): comm "insmod", pid 3922, jiffies 4295277753 (age 925.408s) hex dump (first 8 bytes): 6d 74 64 30 00 88 ff ff mtd0.... backtrace: [] __kmalloc_node_track_caller+0x4e/0x150 [] kvasprintf+0xb0/0x130 [] kobject_set_name_vargs+0x2f/0xb0 [] dev_set_name+0xab/0xe0 [] add_mtd_device+0x4bb/0x700 [] mtd_device_parse_register+0x2ac/0x3f0 [] 0xffffffffa0238457 [] 0xffffffffa02a008f [] do_one_initcall+0x87/0x2a0 [] do_init_module+0xdf/0x320 [] load_module+0x2f98/0x3330 [] __do_sys_finit_module+0x113/0x1b0 [] do_syscall_64+0x35/0x80 [] entry_SYSCALL_64_after_hwframe+0x46/0xb0 If register device failed, should call put_device() to give up the reference.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.4-1 (bookworm)linux 6.1.4-1 (bookworm)
linuxlinux——
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < a75f45afa932bfb24a2603ebcea5efd2e7cdcfd6a75f45afa932bfb24a2603ebcea5efd2e7cdcfd6
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < 2302e2dc42b1f84f951c725ce742fc21c5a1e1512302e2dc42b1f84f951c725ce742fc21c5a1e151
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < db07fe76df01f40cb897d6e9066b84e46957beb3db07fe76df01f40cb897d6e9066b84e46957beb3
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < fa0d32ab8407d7481450c664fd0de64f2dae9489fa0d32ab8407d7481450c664fd0de64f2dae9489
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < 330bc5533e8a8ed69cb951d5a8edce9bddb9db21330bc5533e8a8ed69cb951d5a8edce9bddb9db21
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < 71212d73184845c944ef1b43f092e643e5bde00371212d73184845c944ef1b43f092e643e5bde003
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < 1b172fb05d6315ecec082fd7544a3390e96f0d7e1b172fb05d6315ecec082fd7544a3390e96f0d7e
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < bcabe1dc2a344adbb3382930a23e273ba9382277bcabe1dc2a344adbb3382930a23e273ba9382277
linuxlinux>= 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221 < 895d68a39481a75c680aa421546931fb11942fa6895d68a39481a75c680aa421546931fb11942fa6
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 2.6.30 < 4.9.3374.9.337
linuxlinux_kernel>= 4.10.0 < 4.14.3034.14.303
linuxlinux_kernel>= 4.15.0 < 4.19.2704.19.270
linuxlinux_kernel>= 4.20.0 < 5.4.2295.4.229
linuxlinux_kernel>= 5.11.0 < 5.15.865.15.86
linuxlinux_kernel>= 5.16.0 < 6.0.166.0.16
linuxlinux_kernel>= 5.5.0 < 5.10.1635.10.163
linuxlinux_kernel>= 6.1.0 < 6.1.26.1.2
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.