CVE-2022-50331: wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()
In the Linux kernel, the following vulnerability has been resolved:
wwanhwsim: fix possible memory leak in wwanhwsimdevnew()
Inject fault while probing module, if deviceregister() fails, but the refcount of kobject is not decreased to 0, the name allocated in devsetname() is leaked. Fix this by calling putdevice(), so that name can be freed in callback function kobjectcleanup().
unreferenced object 0xffff88810152ad20 (size 8): comm "modprobe", pid 252, jiffies 4294849206 (age 22.713s) hex dump (first 8 bytes): 68 77 73 69 6d 30 00 ff hwsim0.. backtrace: [<000000009c3504ed>] kmallocnodetrackcaller+0x44/0x1b0 [<00000000c0228a5e>] kvasprintf+0xb5/0x140 [<00000000cff8c21f>] kvasprintfconst+0x55/0x180 [<0000000055a1e073>] kobjectsetnamevargs+0x56/0x150 [<000000000a80b139>] devsetname+0xab/0xe0
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50331?
CVE-2022-50331 has been categorized with a severity level that indicates potential risk of memory leaks in the Linux kernel.
How do I fix CVE-2022-50331?
To fix CVE-2022-50331, it is recommended to update to the latest version of the Linux kernel where the vulnerability has been resolved.
What types of devices are affected by CVE-2022-50331?
CVE-2022-50331 affects devices using the Linux kernel, specifically those that utilize the wwan_hwsim module.
What causes the memory leak in CVE-2022-50331?
The memory leak in CVE-2022-50331 is caused by a failure in the device_register() function not properly decreasing the reference count of the kobject.
Is CVE-2022-50331 actively being exploited?
As of the latest information, there is no indication that CVE-2022-50331 is being actively exploited in the wild.