CVE-2022-50431

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()

dev_set_name() in soundbus_add_one() allocates memory for name, it need be freed when of_device_register() fails, call soundbus_dev_put() to give up the reference that hold in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hit to 0. And other resources are also freed in i2sbus_release_dev(), so it can return 0 directly.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < fd410d24665e4efb3c1796797181265efe553e9caffected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < 802532a50acf501fdafe38a84ca2aa886d68af68affected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < 027fee10e3a400cf6f3237374a1248da1082807baffected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < 5bdea674534153110b90d70b02f2fbaf48b2c0ebaffected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < ce6fd1c382a38b75557db85a2fe99d285540a03daffected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < e81d7826b8f40430a1ea1b330e24d9a9eb4512c4affected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < c7524279c8ddc7dbf3463bec70e0289097959944affected
LinuxLinuxf3d9478b2ce468c3115b02ecae7e975990697f15 < 4a4c8482e370d697738a78dcd7bf2780832cb712affected
LinuxLinux2.6.18affected
LinuxLinux0 < 2.6.18unaffected
LinuxLinux4.9.332 <= 4.9.*unaffected
LinuxLinux4.14.298 <= 4.14.*unaffected
LinuxLinux4.19.264 <= 4.19.*unaffected
LinuxLinux5.4.223 <= 5.4.*unaffected
LinuxLinux5.10.153 <= 5.10.*unaffected
LinuxLinux5.15.77 <= 5.15.*unaffected
LinuxLinux6.0.7 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

References