Memory Leak Vulnerability in Linux Kernel's tifm Driver

CVE-2022-50349

What is CVE-2022-50349?

A memory leak issue has been identified in the Linux kernel's tifm driver, specifically within the tifm_7xx1_switch_media() function. This vulnerability occurs when device_register() fails during device addition, resulting in the unintended exposure of kobject names allocated during the process. It is crucial for developers to utilize put_device() correctly to relinquish device references rather than freeing the device directly, which could lead to significant memory management issues and potentially affect system stability.

References