Memory Leak Vulnerability in Linux Kernel Affects WWAN Device Registration

CVE-2022-50331

What is CVE-2022-50331?

A memory leak vulnerability was identified in the Linux kernel affecting the WWAN device registration process. In scenarios where device registration fails during the module probing, the reference count for the kobject does not decrement to zero, leading to a name allocation leak in the dev_set_name() function. This leak can result in unreferenced objects persisting in memory, potentially affecting system performance and resource availability. The issue has been resolved by ensuring that the put_device() function is called, allowing proper cleanup of allocated memory in the kobject_cleanup() callback.

References