-

CVE-2022-50669

misc: ocxl: fix possible name leak in ocxl_file_register_afu()

In the Linux kernel, the following vulnerability has been resolved:

misc: ocxl: fix possible name leak in ocxl_file_register_afu()

If device_register() returns error in ocxl_file_register_afu(),
the name allocated by dev_set_name() need be freed. As comment
of device_register() says, it should use put_device() to give
up the reference in the error path. So fix this by calling
put_device(), then the name can be freed in kobject_cleanup(),
and info is freed in info_release().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < 0cd05062371a49774e8a45258bdedf0bd6d3d327
Status affected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < 7525741cb302a1672b8c3a5edb2a08e4229b5c7c
Status affected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < 3299983a6bf628249ac650908e62d12de959341e
Status affected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < 557b7de055d1e230ddb6664c29d26917b8db9143
Status affected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < 2fce8b3583d1641a1716486f408478b58e96ec91
Status affected
Version 75ca758adbafc81804c39b2c200ecdc819a6c042
Version < a4cb1004aeed2ab893a058fad00a5b41a12c4691
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.2
Status affected
Version 0
Version < 5.2
Status unaffected
Version <= 5.4.*
Version 5.4.229
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.085
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.