CVE-2022-49836

siox: fix possible memory leak in siox_device_add()

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

siox: fix possible memory leak in siox_device_add()

If device_register() returns error in siox_device_add(),

the name allocated by dev_set_name() need be freed. As

comment of device_register() says, it should use put_device()

to give up the reference in the error path. So fix this

by calling put_device(), then the name can be freed in

kobject_cleanup(), and sdevice is freed in siox_device_release(),

set it to null in error path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.7th percentile
Published
2025-05-01T14:09Z
EPSS history
Timeline
  • 01 MAY 14:09Z
    siox: fix possible memory leak in siox_device_add()
    cvelistv5