In the Linux kernel, the following vulnerability has been resolved:
firmware: dmi-sysfs: Fix memory leak in dmisysfsregister_handle
kobjectinitandadd() takes reference even when it fails. According to the doc of kobjectinitandadd()
If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object.
Fix this issue by calling kobject_put().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49370.json"
}[
{
"digest": {
"length": 991.0,
"function_hash": "98832652598282399740418297124298243356"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49370-58d8de92",
"target": {
"function": "dmi_sysfs_register_handle",
"file": "drivers/firmware/dmi-sysfs.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fdffa4ad8f6bf1ece877edfb807f2b2c729d8578"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"46786252863855472959350876014970247732",
"275526578313577951817812944274739567941",
"295354865281178669879048830021588184976",
"203580386867798495459167874159835187324"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49370-6a81b9f4",
"target": {
"file": "drivers/firmware/dmi-sysfs.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fdffa4ad8f6bf1ece877edfb807f2b2c729d8578"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49370.json"