CVE Database›CVE-2022-50343

CVE-2022-50343

kernel: rapidio: fix possible name leaks when rio_add_device() fails

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 16, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rapidio: fix possible name leaks when rio_add_device() fails

Patch series "rapidio: fix three possible memory leaks".

This patchset fixes three name leaks in error handling.

  • patch #1 fixes two name leaks while rio_add_device() fails.
  • patch #2 fixes a name leak while rio_register_mport() fails.

This patch (of 2):

If rio_add_device() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and the 'rdev' can be freed in rio_release_dev().

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified