CVE-2022-49835

ALSA: hda: fix potential memleak in 'add_widget_node'

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: fix potential memleak in 'add_widget_node'

As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3256be6537751f65c76b3ecfbb4e667f87525a2f to before b688a3ec235222d9a84e43a48a6f31acb95baf2dAffected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7Affected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 90b7d055e2b5f39429f9a9e3815b48a48530ef28Affected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 02dea987ec1cac712c78e75d224ceb9bb73519edAffected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 3a79f9568de08657fcdbc41d6fc4c0ca145a7a2bAffected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 7140d7aaf93da6a665b454f91bb4dc6b1de218bdAffected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 455d99bd6baf19688048b6d42d9fa74eae27f93bAffected 3256be6537751f65c76b3ecfbb4e667f87525a2f to before 9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143Affected
LinuxLinux	4.1Affected before 4.1Not affected 4.9.334 through 4.9.Not affected 4.14.300 through 4.14.Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.155 through 5.10.Not affected 5.15.79 through 5.15.Not affected 6.0.9 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

3256be6537751f65c76b3ecfbb4e667f87525a2f to before b688a3ec235222d9a84e43a48a6f31acb95baf2dAffected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7Affected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 90b7d055e2b5f39429f9a9e3815b48a48530ef28Affected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 02dea987ec1cac712c78e75d224ceb9bb73519edAffected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 3a79f9568de08657fcdbc41d6fc4c0ca145a7a2bAffected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 7140d7aaf93da6a665b454f91bb4dc6b1de218bdAffected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 455d99bd6baf19688048b6d42d9fa74eae27f93bAffected
3256be6537751f65c76b3ecfbb4e667f87525a2f to before 9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143Affected

LinuxLinux

4.1Affected
before 4.1Not affected
4.9.334 through 4.9.*Not affected
4.14.300 through 4.14.*Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.155 through 5.10.*Not affected
5.15.79 through 5.15.*Not affected
6.0.9 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.