CVE-2022-50474: macintosh: fix possible memory leak in macio_add_one_device()
In the Linux kernel, the following vulnerability has been resolved:
macintosh: fix possible memory leak in macioaddonedevice()
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's busid string array"), the name of device is allocated dynamically. It needs to be freed when ofdeviceregister() fails. Call putdevice() to give up the reference that's taken in deviceinitialize(), so that it can be freed in kobjectcleanup() when the refcount hits 0.
macio device is freed in macioreleasedev(), so the kfree() can be removed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50474?
CVE-2022-50474 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50474?
To fix CVE-2022-50474, ensure that your Linux kernel is updated to the latest version that includes the patch addressing this vulnerability.
What component of the Linux kernel is affected by CVE-2022-50474?
CVE-2022-50474 affects the device management component of the Linux kernel related to memory allocation.
Can CVE-2022-50474 lead to data loss?
While CVE-2022-50474 primarily involves a memory leak, it can potentially lead to instability in affected systems.
Is CVE-2022-50474 exploitation possible remotely?
CVE-2022-50474 does not describe a remote exploitation vector, as it is related to internal device handling.