CVE-2022-50522

mcb: mcb-parse: fix error handing in chameleon_parse_gdd()

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mcb: mcb-parse: fix error handing in chameleon_parse_gdd()

If mcb_device_register() returns error in chameleon_parse_gdd(), the refcount of bus and device name are leaked. Fix this by calling put_device() to give up the reference, so they can be released in mcb_release_dev() and kobject_cleanup().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 891f606ae0765bc9ca99f5276735be4d338f0255Affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before cf6e70c0ced50b52415ac0c88eba1fb09c500a5aAffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before fd85ece416fd7edb945203e59d4cd94952f77e7cAffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 110dc34c9fa33d37f55b394b1199ea6c0ad1ee84Affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 7b289b791a59386dc23a00d3cf17a0db984b40d3Affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 43bfc7c2402a22d3b4eb08c040f274ba2b76461aAffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before b948baa29394ec5f4e6ec28486e7d06a76caee91Affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 4a9f1a8b3af287581ffb690d0e1593c681729ddbAffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to before 728ac3389296caf68638628c987aeae6c8851e2dAffected
LinuxLinux
  • 3.15Affected
  • before 3.15Not affected
  • 4.9.337 through 4.9.*Not affected
  • 4.14.303 through 4.14.*Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.