CVE-2022-49835

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: fix potential memleak in 'add_widget_node'

As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

The vulnerability in add_widget_node() arises from a missing kobject_put() call when kobject_add() fails. This can result in a memory leak, as dynamically allocated memory for the kobject’s name may not be released. While the issue does not lead to privilege escalation or memory corruption, it could result in resource exhaustion over time if triggered repeatedly.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.