CVE-2022-50522: mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
In the Linux kernel, the following vulnerability has been resolved:
mcb: mcb-parse: fix error handing in chameleonparsegdd()
If mcbdeviceregister() returns error in chameleonparsegdd(), the refcount of bus and device name are leaked. Fix this by calling putdevice() to give up the reference, so they can be released in mcbreleasedev() and kobjectcleanup().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50522?
The severity of CVE-2022-50522 is classified as medium due to the potential for resource leakage.
How do I fix CVE-2022-50522?
To fix CVE-2022-50522, update the Linux kernel to a version that has addressed this vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-50522?
CVE-2022-50522 affects multiple versions of the Linux kernel between 3.15 and 6.1.2.
What are the potential risks of not patching CVE-2022-50522?
Not patching CVE-2022-50522 can lead to memory leaks and performance degradation in affected systems.
Is CVE-2022-50522 related to device registration in Linux?
Yes, CVE-2022-50522 involves issues in error handling during the device registration process within the Linux kernel.