CVE-2022-49836

Source
https://cve.org/CVERecord?id=CVE-2022-49836
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49836.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49836
Downstream
Related
Published
2025-05-01T14:09:53.454Z
Modified
2026-04-03T13:14:49.545988973Z
Summary
siox: fix possible memory leak in siox_device_add()
Details

In the Linux kernel, the following vulnerability has been resolved:

siox: fix possible memory leak in sioxdeviceadd()

If deviceregister() returns error in sioxdeviceadd(), the name allocated by devsetname() need be freed. As comment of deviceregister() says, it should use putdevice() to give up the reference in the error path. So fix this by calling putdevice(), then the name can be freed in kobjectcleanup(), and sdevice is freed in sioxdevice_release(), set it to null in error path.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49836.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bbecb07fa0af9a41507ce06d4631fdb3b5059417
Fixed
0a5da069603ecc3d7aa09167450235462adaa295
Fixed
f9fe7ba4ea5b24ffdf8e125f660aca3ba4a147fb
Fixed
a4b5423f88a17a36550ae8c16c46779b1ee42f4b
Fixed
5d03c2911c529ea4d6ebfec53425f1091e8d402b
Fixed
d9c31e728843259209fb530c59995e4fe262699f
Fixed
6e63153db50059fb78b8a8447b132664887d24e3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49836.json"