Riskcovery

CVE-2022-50561

iio: fix memory leak in iio_device_register_eventset()

State
Published
Severity
Not scored
Published
Oct 22, 2025
Updated
May 11, 2026
Reserved
Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: fix memory leak in iio_device_register_eventset()

When iio_device_register_sysfs_group() returns failed, iio_device_register_eventset() needs to free attrs array.

Otherwise, kmemleak would scan & report memory leak as below:

unreferenced object 0xffff88810a1cc3c0 (size 32): comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s) backtrace: __kmalloc+0x46/0x1b0 iio_device_register_eventset at drivers/iio/industrialio-event.c:541 __iio_device_register at drivers/iio/industrialio-core.c:1959 __devm_iio_device_register at drivers/iio/industrialio-core.c:2040

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 32f171724e5cbecc80594fb6eced057cfdd6eb6f to before dc6afd6070f3a5b086c8c5cfa6ded63ae44494daAffected
  • 32f171724e5cbecc80594fb6eced057cfdd6eb6f to before 5de3add7509c95685f1185683b817dd206c4b1f1Affected
  • 32f171724e5cbecc80594fb6eced057cfdd6eb6f to before a154b1c139fbf6a49762159be81d425d41ceec87Affected
  • 32f171724e5cbecc80594fb6eced057cfdd6eb6f to before 86fdd15e10e404e70ecb2a3bff24d70356d42b36Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.