NetSight
medium5.5

CVE-2022-49835

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory…

Impact

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.334
from 4.10 before 4.14.300
from 4.15 before 4.19.267
from 4.20 before 5.4.225
from 5.5 before 5.10.155
from 5.11 before 5.15.79

Weakness classification

References