CVE-2022-50857
Reference Leak in Linux rapidio rio_register_mport() Function
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
| linux | kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's rapidio subsystem involves a possible name leak in the rio_register_mport() function. Specifically, if device_register() returns an error, the name allocated by dev_set_name() is not properly freed. The fix involves using put_device() to release the reference in the error path, allowing the name to be freed during kobject_cleanup(), and ensuring the port is properly removed from rio_mports.
How can this vulnerability impact me? :
The vulnerability could lead to resource leaks in the kernel, such as memory or name leaks, which might degrade system stability or performance over time. However, there is no indication of direct security impact like privilege escalation or data exposure.