CVE-2022-50349

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()

If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in device_add() is leaked.

Never directly free @dev after calling device_register(), even if it returned an error! Always use put_device() to give up the reference initialized.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < 2bbb222a54ff501f77ce593d21b76b79c905045e; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < d861b7d41b17942b337d4b87a70de7cd1dc44d4e; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < 1695b1adcc3a7d985cd22fa3b55761edf3fab50d; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < ee2715faf7e7153f5142ed09aacfa89a64d45dcb; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < 57c857353d5020bdec8284d9c0fee447484fe5e0; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < 848c45964ded537107e010aaf353aa30a0855387; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < 35abbc8406cc39e72d3ce85f6e869555afe50d54; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < ef843ee20576039126d34d6eb5f45d14c3e6ce18; >= 2428a8fe2261e901e058d9ea8b6ed7e1b4268b79, < fd2c930cf6a5b9176382c15f9acb1996e76e25ad
LinuxLinux2.6.22

References

Timeline

Published
Sep 16, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-503504.7In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the loCVE-2022-503515.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_create() If the cifs already shutdown, we sCVE-2022-503525.5In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault CVE-2022-503535.5In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc_add_host(CVE-2022-503545.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd_process_device_init_vm error handling Should only CVE-2022-503555.5In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix some erroneous memory clean-up loops In some initCVE-2022-503565.5In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfb_init() fails WCVE-2022-503575.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3_get_properties() funCVE-2022-503584.2In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle CVE-2022-503595.5In the Linux kernel, the following vulnerability has been resolved: media: cx88: Fix a null-ptr-deref bug in buffer_prepare() When the driCVE-2022-503605.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: fix aux-bus EP lifetime Device-managed resources allocatedCVE-2022-503615.5In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init
CVE-2022-50349: Medium severity, CVSS 5.5 | Vulnix