Riskcovery

CVE-2022-49821

mISDN: fix possible memory leak in mISDN_dsp_element_register()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mISDN: fix possible memory leak in mISDN_dsp_element_register()

Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, use put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0.

The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the kfree() is removed. list_del() is called in mISDN_dsp_dev_release(), so it need be initialized.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before bbd53d05c4c892080ef3b617eff4f57903acecb9Affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before b119bedbefb7dd9ed8bf8cb9f1056504250d610eAffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before 727ed7d28348c026c7ef4d852f3d0e5054d376e8Affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before 0f2c681900a01e3f23789bca26d88268c3d5b51dAffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before 083a2c9ef82e184bdf0b9f9a1e5fc38d32afbb47Affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before 7a05e3929668c8cfef495c69752a9e91fac4878fAffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before d4b8394725079670be309f9a35ad88a8cbbaaefdAffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to before 98a2ac1ca8fd6eca6867726fe238d06e75eb1acdAffected
LinuxLinux
  • 2.6.30Affected
  • before 2.6.30Not affected
  • 4.9.334 through 4.9.*Not affected
  • 4.14.300 through 4.14.*Not affected
  • 4.19.267 through 4.19.*Not affected
  • 5.4.225 through 5.4.*Not affected
  • 5.10.156 through 5.10.*Not affected
  • 5.15.80 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.