CVE - CVE-2022-49793

CVE-ID
CVE-2022-49793	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() dev_set_name() allocates memory for name, it need be freed when device_add() fails, call put_device() to give up the reference that hold in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hit to 0. Fault injection test can trigger this: unreferenced object 0xffff8e8340a7b4c0 (size 32): comm "modprobe", pid 243, jiffies 4294678145 (age 48.845s) hex dump (first 32 bytes): 69 69 6f 5f 73 79 73 66 73 5f 74 72 69 67 67 65 iio_sysfs_trigge 72 00 a7 40 83 8e ff ff 00 86 13 c4 f6 ee ff ff r..@............ backtrace: [<0000000074999de8>] __kmem_cache_alloc_node+0x1e9/0x360 [<00000000497fd30b>] __kmalloc_node_track_caller+0x44/0x1a0 [<000000003636c520>] kstrdup+0x2d/0x60 [<0000000032f84da2>] kobject_set_name_vargs+0x1e/0x90 [<0000000092efe493>] dev_set_name+0x4e/0x70
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0dd52e141afde089304de470148d311b05c14564 URL:https://git.kernel.org/stable/c/0dd52e141afde089304de470148d311b05c14564 MISC:https://git.kernel.org/stable/c/2c4e65285bdea23fd36d2ff376006ac64db6f42e URL:https://git.kernel.org/stable/c/2c4e65285bdea23fd36d2ff376006ac64db6f42e MISC:https://git.kernel.org/stable/c/5a39382aa5411d64b25a71516c2c7480aab13bb7 URL:https://git.kernel.org/stable/c/5a39382aa5411d64b25a71516c2c7480aab13bb7 MISC:https://git.kernel.org/stable/c/656f670613662b6cc77aad14112db2803ad18fa8 URL:https://git.kernel.org/stable/c/656f670613662b6cc77aad14112db2803ad18fa8 MISC:https://git.kernel.org/stable/c/8dddf2699da296c84205582aaead6b43dd7e8c4b URL:https://git.kernel.org/stable/c/8dddf2699da296c84205582aaead6b43dd7e8c4b MISC:https://git.kernel.org/stable/c/b47bb521961f027b4dcf8683337a7a1ba9e5ea1f URL:https://git.kernel.org/stable/c/b47bb521961f027b4dcf8683337a7a1ba9e5ea1f MISC:https://git.kernel.org/stable/c/efa17e90e1711bdb084e3954fa44afb6647331c0 URL:https://git.kernel.org/stable/c/efa17e90e1711bdb084e3954fa44afb6647331c0 MISC:https://git.kernel.org/stable/c/f68c96821b61d2c71a35dbb8bf90c347fad624d9 URL:https://git.kernel.org/stable/c/f68c96821b61d2c71a35dbb8bf90c347fad624d9
Assigning CNA
kernel.org
Date Record Created
20250501	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250501)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)