NetSight
medium5.5

CVE-2022-50349

In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() retur…

Impact

In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in device_add() is leaked. Never directly free @dev after calling device_register(), even if it returned an error! Always use put_device() to give up the reference initialized.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.22 before 4.9.337
from 4.10 before 4.14.303
from 4.15 before 4.19.270
from 4.20 before 5.4.229
from 5.5 before 5.10.163
from 5.11 before 5.15.86

Weakness classification

References