File Pointer Leak in Linux Kernel’s Power Tools by Linux Foundation

CVE-2022-50189

What is CVE-2022-50189?

A vulnerability exists in the Linux kernel's power management tools, specifically in the turbostat utility. When the function fscanf fails, the code fails to properly close an open file pointer before returning. This oversight leads to potential resource leakage, which could compromise system performance. The issue was identified through static analysis using cppcheck and has been addressed in subsequent patches to ensure proper resource management and prevent file pointer leaks.

References