CVE-2022-49780

scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

If device_register() fails in tcm_loop_setup_hba_bus(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanup(). The 'tl_hba' will be freed in tcm_loop_release_adapter(), so it don't need goto error label in this case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 41a6b8b527a5957fab41c3c05e25ad125268e2e9Affected 3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 28f7ff5e7559d226e63c7c5de74eb075a83d8c53Affected 3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 75205f1b47a88c3fac4f30bd7567e89b2887c7fdAffected 3703b2c5d041a68095cdd22380c23ce27d449ad7 to before a636772988bafab89278e7bb3420d8e8eacfe912Affected 3703b2c5d041a68095cdd22380c23ce27d449ad7 to before dce0589a3faec9e2e543e97bca7e62592ec85585Affected 3703b2c5d041a68095cdd22380c23ce27d449ad7 to before bc68e428d4963af0201e92159629ab96948f0893Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.156 through 5.10.Not affected 5.15.80 through 5.15.Not affected 6.0.10 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 41a6b8b527a5957fab41c3c05e25ad125268e2e9Affected
3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 28f7ff5e7559d226e63c7c5de74eb075a83d8c53Affected
3703b2c5d041a68095cdd22380c23ce27d449ad7 to before 75205f1b47a88c3fac4f30bd7567e89b2887c7fdAffected
3703b2c5d041a68095cdd22380c23ce27d449ad7 to before a636772988bafab89278e7bb3420d8e8eacfe912Affected
3703b2c5d041a68095cdd22380c23ce27d449ad7 to before dce0589a3faec9e2e543e97bca7e62592ec85585Affected
3703b2c5d041a68095cdd22380c23ce27d449ad7 to before bc68e428d4963af0201e92159629ab96948f0893Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.156 through 5.10.*Not affected
5.15.80 through 5.15.*Not affected
6.0.10 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.