CVE-2022-50278

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp_add_id() to avoid memory leak.

Weakness Classification (1)

CWE-401

Affected Software (11)

Vendor	Product	Version
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < ea77b4b761cd75e5456f677311babfa0418f289a
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < bbcf772216aa237036cc3ae3158288d0a95aaf4d
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < 81b024df4755e6bb6993b786584eca6eabbb9791
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < dac87e295cddc8ab316cff14ab2071b5221d84fa
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < c12b314bb23dc0c83e03402cc84574700947e3b2
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < 1f50c7497a5f89de0c31f2edf086af41ff834320
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < 290dd73b943c95c006df973257076ff163adf4d0
Linux	Linux	1fa5ae857bb14f6046205171d98506d8112dd74e < 110d7b0325c55ff3620073ba4201845f59e22ebf
Linux	Linux	2.6.30
linux	linux_kernel	2.6.30 – 4.9.337