CVE-2022-49835

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-05-01 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Weakness Classification (1)

Affected Software (14)

VendorProductVersion
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < b688a3ec235222d9a84e43a48a6f31acb95baf2d
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 90b7d055e2b5f39429f9a9e3815b48a48530ef28
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 02dea987ec1cac712c78e75d224ceb9bb73519ed
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 7140d7aaf93da6a665b454f91bb4dc6b1de218bd
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 455d99bd6baf19688048b6d42d9fa74eae27f93b
Linux Linux 3256be6537751f65c76b3ecfbb4e667f87525a2f < 9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143
Linux Linux 4.1
linux linux_kernel < 4.9.334
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.002020
Percentile 10.3%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →