CVE-2022-49403

lib/string_helpers: fix not adding strarray to device's resource list

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

lib/string_helpers: fix not adding strarray to device's resource list

Add allocated strarray to device's resource list. This is a must to automatically release strarray when the device disappears.

Without this fix we have a memory leak in the few drivers which use devm_kasprintf_strarray().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a to before a152eb42fcecfe41239c3c6695342f3a128593e7Affected acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a to before bf29edab0c9ff3d2633b8306a67d04c357e2a385Affected acdb89b6c87a2d7b5c48a82756e6f5c6f599f60a to before cd290a9839cee2f6641558877e707bd373c8f6f1Affected
LinuxLinux	5.17Affected before 5.17Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.