Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50624

net: netsec: fix error handling in netsec_register_mdio()

Description

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsec_register_mdio() If phy_device_register() fails, phy_device_free() need be called to put refcount, so memory of phy device and device name can be freed in callback function. If get_phy_device() fails, mdiobus_unregister() need be called, or it will cause warning in mdiobus_free() and kobject is leaked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 533dd11a12f698c571a12271b20f235792d3e148 to < 728884b22d83148a330b23f9472f1e118b589211affected
  • 533dd11a12f698c571a12271b20f235792d3e148 to < fda2d07234a21be4d71ebfe97a45f499726902d6affected
  • 533dd11a12f698c571a12271b20f235792d3e148 to < 62f0a08e82a6312efd7df7f595c0b11d4ffde610affected
  • 533dd11a12f698c571a12271b20f235792d3e148 to < 1e0bee973ef6fc3c1e3acb014515eaea37c8fa17affected
  • 533dd11a12f698c571a12271b20f235792d3e148 to < 846e677daf51220d7975c61a20e440a88473951eaffected
  • 533dd11a12f698c571a12271b20f235792d3e148 to < 94423589689124e8cd145b38a1034be7f25835b2affected

Linux Linux

Default version status: affected

  • 4.16affected
  • 0 to < 4.16unaffected
  • 4.19.264 to ≤ 4.19.*unaffected
  • 5.4.223 to ≤ 5.4.*unaffected
  • 5.10.153 to ≤ 5.10.*unaffected
  • 5.15.77 to ≤ 5.15.*unaffected
  • 6.0.7 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References