CVEvulnerability
CVE-2022-50561
- Status
- Deferred
- Published
- 2025-10-22
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: fix memory leak in iio_device_register_eventset()
When iio_device_register_sysfs_group() returns failed,
iio_device_register_eventset() needs to free attrs array.
Otherwise, kmemleak would scan & report memory leak as below:
unreferenced object 0xffff88810a1cc3c0 (size 32):
comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s)
backtrace:
__kmalloc+0x46/0x1b0
iio_device_register_eventset at drivers/iio/industrialio-event.c:541
__iio_device_register at drivers/iio/industrialio-core.c:1959
__devm_iio_device_register at drivers/iio/industrialio-core.c:2040
References
- https://git.kernel.org/stable/c/5de3add7509c95685f1185683b817dd206c4b1f1 git.kernel.org
- https://git.kernel.org/stable/c/86fdd15e10e404e70ecb2a3bff24d70356d42b36 git.kernel.org
- https://git.kernel.org/stable/c/a154b1c139fbf6a49762159be81d425d41ceec87 git.kernel.org
- https://git.kernel.org/stable/c/dc6afd6070f3a5b086c8c5cfa6ded63ae44494da git.kernel.org