CVE-2022-50561
Description
In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iio_device_register_eventset() When iio_device_register_sysfs_group() returns failed, iio_device_register_eventset() needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced object 0xffff88810a1cc3c0 (size 32): comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s) backtrace: __kmalloc+0x46/0x1b0 iio_device_register_eventset at drivers/iio/industrialio-event.c:541 __iio_device_register at drivers/iio/industrialio-core.c:1959 __devm_iio_device_register at drivers/iio/industrialio-core.c:2040
How to fix
- Linux Linuxdc6afd6070f3a5b086c8c5cfa6ded63ae44494da, 5de3add7509c95685f1185683b817dd206c4b1f1, a154b1c139fbf6a49762159be81d425d41ceec87, 86fdd15e10e404e70ecb2a3bff24d70356d42b36 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 32f171724e5cbecc80594fb6eced057cfdd6eb6f ≤ v < dc6afd6070f3a5b086c8c5cfa6ded63ae44494da, 32f171724e5cbecc80594fb6eced057cfdd6eb6f ≤ v < 5de3add7509c95685f1185683b817dd206c4b1f1, 32f171724e5cbecc80594fb6eced057cfdd6eb6f ≤ v < a154b1c139fbf6a49762159be81d425d41ceec87, 32f171724e5cbecc80594fb6eced057cfdd6eb6f ≤ v < 86fdd15e10e404e70ecb2a3bff24d70356d42b36, 5.13 | dc6afd6070f3a5b086c8c5cfa6ded63ae44494da, 5de3add7509c95685f1185683b817dd206c4b1f1, a154b1c139fbf6a49762159be81d425d41ceec87, 86fdd15e10e404e70ecb2a3bff24d70356d42b36 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.