CVE-2022-50343

rapidio: fix possible name leaks when rio_add_device() fails

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rapidio: fix possible name leaks when rio_add_device() fails

Patch series "rapidio: fix three possible memory leaks".

This patchset fixes three name leaks in error handling.

- patch #1 fixes two name leaks while rio_add_device() fails.

- patch #2 fixes a name leak while rio_register_mport() fails.

This patch (of 2):

If rio_add_device() returns error, the name allocated by dev_set_name()

need be freed. It should use put_device() to give up the reference in the

error path, so that the name can be freed in kobject_cleanup(), and the

'rdev' can be freed in rio_release_dev().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Published
2025-09-16T16:11Z
EPSS history
Timeline
  • 16 SEP 16:11Z
    rapidio: fix possible name leaks when rio_add_device() fails
    cvelistv5