CVE-2022-50857
published 2025-12-30CVE-2022-50857: In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register() returns…
PriorityP418medium5.3
EPSS
0.21%
11.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 0a71344f99289250e4d5b8adbac76f444485c840 | 0a71344f99289250e4d5b8adbac76f444485c840 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 117fede82e9d6ea3de30746d500eb5edc2eb8310 | 117fede82e9d6ea3de30746d500eb5edc2eb8310 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < a73a626c0510d203e369aeb26c4d6ec9c75af027 | a73a626c0510d203e369aeb26c4d6ec9c75af027 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 1bbad5793f404cf218757e3beb600eca6080330f | 1bbad5793f404cf218757e3beb600eca6080330f |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 97d9eb45ffa67ffa112a6659953321b8f7db0065 | 97d9eb45ffa67ffa112a6659953321b8f7db0065 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < a47de2fd3f88a7788be19f94ade72c2244a98045 | a47de2fd3f88a7788be19f94ade72c2244a98045 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 4ddbeae5f224d924cf0b12460dda88c7480aa452 | 4ddbeae5f224d924cf0b12460dda88c7480aa452 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < 9abba4aa60874c5216fc8de7dededadc791de696 | 9abba4aa60874c5216fc8de7dededadc791de696 |
| linux | linux | >= 2aaf308b95b24649a6dcfed89cd956e972089b2a < e92a216d16bde65d21a3227e0fb2aa0794576525 | e92a216d16bde65d21a3227e0fb2aa0794576525 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 3.15.0 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: rapidio: rio: fix possible name leak in rio_register_mport()
vendor_redhat·2025-12-30
CVE-2022-50857 kernel: rapidio: rio: fix possible name leak in rio_register_mport()
kernel: rapidio: rio: fix possible name leak in rio_register_mport()
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt
Debian
CVE-2022-50857: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: ri...
vendor_debian·2022
CVE-2022-50857 CVE-2022-50857: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: ri...
In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and list_del() is called to delete the port from rio_mports.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-mmh4-m2wj-3q4g: In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register(
ghsa_unreviewed·2025-12-30
CVE-2022-50857 GHSA-mmh4-m2wj-3q4g: In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register(
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
OSV
CVE-2022-50857: In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register()
osv·2025-12-30
CVE-2022-50857 CVE-2022-50857: In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register()
In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and list_del() is called to delete the port from rio_mports.
OSV
rapidio: rio: fix possible name leak in rio_register_mport()
osv·2025-12-30
CVE-2022-50857 rapidio: rio: fix possible name leak in rio_register_mport()
rapidio: rio: fix possible name leak in rio_register_mport()
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50857 kernel: rapidio: rio: fix possible name leak in rio_register_mport()
bugzilla·2025-12-30
CVE-2022-50857 CVE-2022-50857 kernel: rapidio: rio: fix possible name leak in rio_register_mport()
CVE-2022-50857 kernel: rapidio: rio: fix possible name leak in rio_register_mport()
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123046-CVE-2022-50857-6a86@gregkh/T
Wiz
CVE-2022-50857 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2022-50857 [MEDIUM] CVE-2022-50857 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50857 :
Linux Debian vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
rapidio: rio: fix possible name leak in rio_register_mport()
If device_register() returns error, the name allocated by dev_set_name()
need be freed. It should use put_device() to give up the reference in the
error path, so that the name can be freed in kobject_cleanup(), and
list_del() is called to delete the port from rio_mports.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Debian
Linux Ubuntu
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15.2
Exploitation Probability (EPSS) N/A
Affected packages and librarie
https://git.kernel.org/stable/c/0a71344f99289250e4d5b8adbac76f444485c840https://git.kernel.org/stable/c/117fede82e9d6ea3de30746d500eb5edc2eb8310https://git.kernel.org/stable/c/1bbad5793f404cf218757e3beb600eca6080330fhttps://git.kernel.org/stable/c/4ddbeae5f224d924cf0b12460dda88c7480aa452https://git.kernel.org/stable/c/97d9eb45ffa67ffa112a6659953321b8f7db0065https://git.kernel.org/stable/c/9abba4aa60874c5216fc8de7dededadc791de696https://git.kernel.org/stable/c/a47de2fd3f88a7788be19f94ade72c2244a98045https://git.kernel.org/stable/c/a73a626c0510d203e369aeb26c4d6ec9c75af027https://git.kernel.org/stable/c/e92a216d16bde65d21a3227e0fb2aa0794576525
2025-12-30
Published