Memory Leak in Linux Kernel's Floppy Disk Driver

CVE-2022-50342

What is CVE-2022-50342?

A memory leak vulnerability was identified in the Linux kernel's floppy disk driver during the floppy initialization process. Specifically, when the floppy_alloc_disk() function fails in the do_floppy_init() sequence, it results in allocated memory not being released properly. This occurs because the error handling path does not deallocate the set->tag allocated during the disk initialization loop. A fix has been implemented to ensure that the set->tag is freed before an error recovery, mitigating potential resource exhaustion and improving system stability.

References