Memory Leak Vulnerability in Linux Kernel RapidIO Implementation

CVE-2022-50343

What is CVE-2022-50343?

A memory leak vulnerability exists in the RapidIO subsystem of the Linux kernel. Specifically, when the functions rio_add_device() and rio_register_mport() encounter errors, certain name allocations are not adequately freed. This oversight can lead to a persistent memory leak, potentially affecting system performance and stability. The recent patch series addresses these issues by ensuring that any allocated names are properly released during error handling, thus reinforcing the robustness of the RapidIO implementation.

References