CVE-2022-50431: ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev()
devsetname() in soundbusaddone() allocates memory for name, it need be freed when ofdeviceregister() fails, call soundbusdevput() to give up the reference that hold in deviceinitialize(), so that it can be freed in kobjectcleanup() when the refcount hit to 0. And other resources are also freed in i2sbusreleasedev(), so it can return 0 directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50431?
CVE-2022-50431 has a moderate severity level due to the potential for memory leaks in the Linux kernel.
How do I fix CVE-2022-50431?
To fix CVE-2022-50431, update to a patched version of the Linux kernel provided by your Linux distribution.
Which versions of the Linux kernel are affected by CVE-2022-50431?
CVE-2022-50431 affects various versions of the Linux kernel ranging from 2.6.18 to 6.1-rc2.
What impact does CVE-2022-50431 have on my system?
CVE-2022-50431 may lead to increased memory usage, potentially affecting system performance.
Is CVE-2022-50431 exploitative in nature?
CVE-2022-50431 is not classified as exploitable, but it can lead to resource leaks that may impact system stability.