NetSight
IP …
low3.3

CVE-2022-50522

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleon_parse_gdd() If mcb_device_register() returns…

Impact

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleon_parse_gdd() If mcb_device_register() returns error in chameleon_parse_gdd(), the refcount of bus and device name are leaked. Fix this by calling put_device() to give up the reference, so they can be released in mcb_release_dev() and kobject_cleanup().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.15 before 4.9.337
from 4.10 before 4.14.303
from 4.15 before 4.19.270
from 4.20 before 5.4.229
from 5.5 before 5.10.163
from 5.11 before 5.15.86

References