CVE-2022-49835

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: fix potential memleak in 'add_widget_node'

As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < b688a3ec235222d9a84e43a48a6f31acb95baf2d; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 90b7d055e2b5f39429f9a9e3815b48a48530ef28; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 02dea987ec1cac712c78e75d224ceb9bb73519ed; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 7140d7aaf93da6a665b454f91bb4dc6b1de218bd; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 455d99bd6baf19688048b6d42d9fa74eae27f93b; >= 3256be6537751f65c76b3ecfbb4e667f87525a2f, < 9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143
LinuxLinux4.1

References

Timeline

Published
May 1, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-498365.5In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in siox_device_add() If device_registerCVE-2022-498375.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory leaks in __check_func_call kmemleak reports this issueCVE-2022-498385.5In the Linux kernel, the following vulnerability has been resolved: sctp: clear out_curr if all frag chunks of current msg are pruned A crCVE-2022-498395.5In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_sas: Fix error handling in sas_phy_add() If transCVE-2022-49848.7ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 contain an SQL injection CVE-2022-498407.8In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() We gotCVE-2022-498415.5In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thaw_noirq hook The following warning is seeCVE-2022-498427.8In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in snd_soc_exit() KASAN reports a use-aCVE-2022-498447.1In the Linux kernel, the following vulnerability has been resolved: can: dev: fix skb drop check In commit a6d190f8c767 ("can: skb: drop tCVE-2022-498455.5In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix missing CAN header initialization ThCVE-2022-498467.8In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot repCVE-2022-498475.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload
CVE-2022-49835: Medium severity, CVSS 5.5 | Vulnix