Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50734

nvmem: core: Fix memleak in nvmem_register()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • de0534df93474f268486c486ea7e01b44a478026 to < 9391cc3a787a58aa224a6440d7f244d780ba2896affected
  • de0534df93474f268486c486ea7e01b44a478026 to < 2bd2774df0ce37920b23819a860a66fdbdd90823affected
  • de0534df93474f268486c486ea7e01b44a478026 to < b6054b9b239a493672f853b034570cca93ba7a88affected
  • de0534df93474f268486c486ea7e01b44a478026 to < bd1244561fa2a4531ded40dbf09c9599084f8b29affected
  • c1d44b93ca9f3ebc26b0de0a7f4b7156702762b6affected
  • 63c2b13ba0428b8f477e4adb1d40a50eb4493c09affected
  • 5.13.19 to < 5.14affected
  • 5.14.6 to < 5.15affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.75 to ≤ 5.15.*unaffected
  • 5.19.17 to ≤ 5.19.*unaffected
  • 6.0.3 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References