NetSight
medium5.5

CVE-2022-50278

In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get r…

Impact

In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp_add_id() to avoid memory leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.30 before 4.9.337
from 4.10 before 4.14.303
from 4.15 before 4.19.270
from 4.20 before 5.4.229
from 5.5 before 5.10.163
from 5.11 before 5.15.86

Weakness classification

References