CVE-2022-50431

ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()

dev_set_name() in soundbus_add_one() allocates memory for name, it need be freed when of_device_register() fails, call soundbus_dev_put() to give up the reference that hold in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hit to 0. And other resources are also freed in i2sbus_release_dev(), so it can return 0 directly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f3d9478b2ce468c3115b02ecae7e975990697f15 to before fd410d24665e4efb3c1796797181265efe553e9cAffected f3d9478b2ce468c3115b02ecae7e975990697f15 to before 802532a50acf501fdafe38a84ca2aa886d68af68Affected f3d9478b2ce468c3115b02ecae7e975990697f15 to before 027fee10e3a400cf6f3237374a1248da1082807bAffected f3d9478b2ce468c3115b02ecae7e975990697f15 to before 5bdea674534153110b90d70b02f2fbaf48b2c0ebAffected f3d9478b2ce468c3115b02ecae7e975990697f15 to before ce6fd1c382a38b75557db85a2fe99d285540a03dAffected f3d9478b2ce468c3115b02ecae7e975990697f15 to before e81d7826b8f40430a1ea1b330e24d9a9eb4512c4Affected f3d9478b2ce468c3115b02ecae7e975990697f15 to before c7524279c8ddc7dbf3463bec70e0289097959944Affected f3d9478b2ce468c3115b02ecae7e975990697f15 to before 4a4c8482e370d697738a78dcd7bf2780832cb712Affected
LinuxLinux	2.6.18Affected before 2.6.18Not affected 4.9.332 through 4.9.Not affected 4.14.298 through 4.14.Not affected 4.19.264 through 4.19.Not affected 5.4.223 through 5.4.Not affected 5.10.153 through 5.10.Not affected 5.15.77 through 5.15.Not affected 6.0.7 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

f3d9478b2ce468c3115b02ecae7e975990697f15 to before fd410d24665e4efb3c1796797181265efe553e9cAffected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before 802532a50acf501fdafe38a84ca2aa886d68af68Affected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before 027fee10e3a400cf6f3237374a1248da1082807bAffected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before 5bdea674534153110b90d70b02f2fbaf48b2c0ebAffected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before ce6fd1c382a38b75557db85a2fe99d285540a03dAffected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before e81d7826b8f40430a1ea1b330e24d9a9eb4512c4Affected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before c7524279c8ddc7dbf3463bec70e0289097959944Affected
f3d9478b2ce468c3115b02ecae7e975990697f15 to before 4a4c8482e370d697738a78dcd7bf2780832cb712Affected

LinuxLinux

2.6.18Affected
before 2.6.18Not affected
4.9.332 through 4.9.*Not affected
4.14.298 through 4.14.*Not affected
4.19.264 through 4.19.*Not affected
5.4.223 through 5.4.*Not affected
5.10.153 through 5.10.*Not affected
5.15.77 through 5.15.*Not affected
6.0.7 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.