CVE-2022-50578 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.1%
top 83.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
In the Linux kernel, the following vulnerability has been resolved:
class: fix possible memory leak in __class_register()
If class_add_groups() returns error, the 'cp->subsys' need be
unregister, and the 'cp' need be freed.
We can not call kset_unregister() here, because the 'cls' will
be freed in callback function class_release() and it's also
freed in caller's error path, it will cause double free.
So fix this by calling kobject_del() and kfree_const(name) to
cleanup kobject. Besides, call…
Affected Packages4 packages
▶CVEListV5linux/linuxced6473e7486702f530a49f886b73195e4977734 — 4efa5443817c1b6de22d401aeca5b2481e835f8c+8
🔴Vulnerability Details
3GHSA▶
GHSA-x9pw-p3r7-mr43: In the Linux kernel, the following vulnerability has been resolved:
class: fix possible memory leak in __class_register()
If class_add_groups() retu↗2025-10-22
OSV▶
CVE-2022-50578: In the Linux kernel, the following vulnerability has been resolved: class: fix possible memory leak in __class_register() If class_add_groups() return↗2025-10-22