CVE-2022-50848
published 2025-12-30CVE-2022-50848: In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns error…
PriorityP419
EPSS
0.25%
16.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < affe3cea6b3148fa66796a48640664822ceccd48 | affe3cea6b3148fa66796a48640664822ceccd48 |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < 4b68caa95064ac464f1b261d08ac677e753d1088 | 4b68caa95064ac464f1b261d08ac677e753d1088 |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < a524e7fed696a4dfef671e0fda3511bfd2dca0cf | a524e7fed696a4dfef671e0fda3511bfd2dca0cf |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < da64e01da40c6b71a54144126da53cc3b27201ac | da64e01da40c6b71a54144126da53cc3b27201ac |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < fce9890e1be4c0460dad850cc8c00414a9d25f0f | fce9890e1be4c0460dad850cc8c00414a9d25f0f |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < a0ead7e8da84f4c3759417b8e928b65e0207c646 | a0ead7e8da84f4c3759417b8e928b65e0207c646 |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < 8e002b9fe831b27d4506df6fa60cb33ba0730ac3 | 8e002b9fe831b27d4506df6fa60cb33ba0730ac3 |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < 78fddc0ff971f9874d53c854818cc4aafa144114 | 78fddc0ff971f9874d53c854818cc4aafa144114 |
| linux | linux | >= 2e4c77bea3d8b17d94f8ee382411f359b708560f < e63e99397b2613d50a5f4f02ed07307e67a190f1 | e63e99397b2613d50a5f4f02ed07307e67a190f1 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.29 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.1 dio_init memory leak (Nessus ID 281700 / WID-SEC-2025-2941)
vuldb·2026-04-26
CVE-2022-50848 [CRITICAL] Linux Kernel up to 6.1.1 dio_init memory leak (Nessus ID 281700 / WID-SEC-2025-2941)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.1. The affected element is the function dio_init. Performing a manipulation results in memory leak.
This vulnerability was named CVE-2022-50848. The attack needs to be approached within the local network. There is no available exploit.
It is recommended to upgrade the affected component.
GHSA
GHSA-82rq-cj65-cv9p: In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() return
ghsa_unreviewed·2025-12-30
CVE-2022-50848 GHSA-82rq-cj65-cv9p: In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() return
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
OSV
drivers: dio: fix possible memory leak in dio_init()
osv·2025-12-30
CVE-2022-50848 drivers: dio: fix possible memory leak in dio_init()
drivers: dio: fix possible memory leak in dio_init()
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
OSV
CVE-2022-50848: In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns
osv·2025-12-30
CVE-2022-50848 CVE-2022-50848: In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns
In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns error, the 'dev' and name needs be freed. Add a release function, and then call put_device() in the error path, so the name is freed in kobject_cleanup() and to the 'dev' is freed in release function.
Red Hat
kernel: drivers: dio: fix possible memory leak in dio_init()
vendor_redhat·2025-12-30
CVE-2022-50848 kernel: drivers: dio: fix possible memory leak in dio_init()
kernel: drivers: dio: fix possible memory leak in dio_init()
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kern
Debian
CVE-2022-50848: linux - In the Linux kernel, the following vulnerability has been resolved: drivers: di...
vendor_debian·2022
CVE-2022-50848 CVE-2022-50848: linux - In the Linux kernel, the following vulnerability has been resolved: drivers: di...
In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dio_init() If device_register() returns error, the 'dev' and name needs be freed. Add a release function, and then call put_device() in the error path, so the name is freed in kobject_cleanup() and to the 'dev' is freed in release function.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50848 kernel: drivers: dio: fix possible memory leak in dio_init()
bugzilla·2025-12-30
CVE-2022-50848 CVE-2022-50848 kernel: drivers: dio: fix possible memory leak in dio_init()
CVE-2022-50848 kernel: drivers: dio: fix possible memory leak in dio_init()
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123043-CVE-2022-50848-4a61@gregkh/T
Wiz
CVE-2022-50848 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50848 CVE-2022-50848 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50848 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
drivers: dio: fix possible memory leak in dio_init()
If device_register() returns error, the 'dev' and name needs be
freed. Add a release function, and then call put_device() in the
error path, so the name is freed in kobject_cleanup() and to the
'dev' is freed in release function.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15.2
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-intel-iotg-5.15
ocfs2-kmp-default
Sourc
https://git.kernel.org/stable/c/4b68caa95064ac464f1b261d08ac677e753d1088https://git.kernel.org/stable/c/78fddc0ff971f9874d53c854818cc4aafa144114https://git.kernel.org/stable/c/8e002b9fe831b27d4506df6fa60cb33ba0730ac3https://git.kernel.org/stable/c/a0ead7e8da84f4c3759417b8e928b65e0207c646https://git.kernel.org/stable/c/a524e7fed696a4dfef671e0fda3511bfd2dca0cfhttps://git.kernel.org/stable/c/affe3cea6b3148fa66796a48640664822ceccd48https://git.kernel.org/stable/c/da64e01da40c6b71a54144126da53cc3b27201achttps://git.kernel.org/stable/c/e63e99397b2613d50a5f4f02ed07307e67a190f1https://git.kernel.org/stable/c/fce9890e1be4c0460dad850cc8c00414a9d25f0f
2025-12-30
Published