CVE-2022-50278

PNP: fix name memory leak in pnp_alloc_dev()

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

PNP: fix name memory leak in pnp_alloc_dev()

After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp_add_id() to avoid memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1fa5ae857bb14f6046205171d98506d8112dd74e to before ea77b4b761cd75e5456f677311babfa0418f289aAffected 1fa5ae857bb14f6046205171d98506d8112dd74e to before 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aaAffected 1fa5ae857bb14f6046205171d98506d8112dd74e to before bbcf772216aa237036cc3ae3158288d0a95aaf4dAffected 1fa5ae857bb14f6046205171d98506d8112dd74e to before 81b024df4755e6bb6993b786584eca6eabbb9791Affected 1fa5ae857bb14f6046205171d98506d8112dd74e to before dac87e295cddc8ab316cff14ab2071b5221d84faAffected 1fa5ae857bb14f6046205171d98506d8112dd74e to before c12b314bb23dc0c83e03402cc84574700947e3b2Affected 1fa5ae857bb14f6046205171d98506d8112dd74e to before 1f50c7497a5f89de0c31f2edf086af41ff834320Affected 1fa5ae857bb14f6046205171d98506d8112dd74e to before 290dd73b943c95c006df973257076ff163adf4d0Affected 1fa5ae857bb14f6046205171d98506d8112dd74e to before 110d7b0325c55ff3620073ba4201845f59e22ebfAffected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

1fa5ae857bb14f6046205171d98506d8112dd74e to before ea77b4b761cd75e5456f677311babfa0418f289aAffected
1fa5ae857bb14f6046205171d98506d8112dd74e to before 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aaAffected
1fa5ae857bb14f6046205171d98506d8112dd74e to before bbcf772216aa237036cc3ae3158288d0a95aaf4dAffected
1fa5ae857bb14f6046205171d98506d8112dd74e to before 81b024df4755e6bb6993b786584eca6eabbb9791Affected
1fa5ae857bb14f6046205171d98506d8112dd74e to before dac87e295cddc8ab316cff14ab2071b5221d84faAffected
1fa5ae857bb14f6046205171d98506d8112dd74e to before c12b314bb23dc0c83e03402cc84574700947e3b2Affected
1fa5ae857bb14f6046205171d98506d8112dd74e to before 1f50c7497a5f89de0c31f2edf086af41ff834320Affected
1fa5ae857bb14f6046205171d98506d8112dd74e to before 290dd73b943c95c006df973257076ff163adf4d0Affected
1fa5ae857bb14f6046205171d98506d8112dd74e to before 110d7b0325c55ff3620073ba4201845f59e22ebfAffected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.