CVEvulnerability
CVE-2022-50734
- Status
- Deferred
- Published
- 2025-12-24
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
References
- https://git.kernel.org/stable/c/2bd2774df0ce37920b23819a860a66fdbdd90823 git.kernel.org
- https://git.kernel.org/stable/c/9391cc3a787a58aa224a6440d7f244d780ba2896 git.kernel.org
- https://git.kernel.org/stable/c/b6054b9b239a493672f853b034570cca93ba7a88 git.kernel.org
- https://git.kernel.org/stable/c/bd1244561fa2a4531ded40dbf09c9599084f8b29 git.kernel.org