CVE-2022-50734
Description
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
How to fix
- Linux Linux9391cc3a787a58aa224a6440d7f244d780ba2896, 2bd2774df0ce37920b23819a860a66fdbdd90823, b6054b9b239a493672f853b034570cca93ba7a88, bd1244561fa2a4531ded40dbf09c9599084f8b29, 5.14, 5.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | de0534df93474f268486c486ea7e01b44a478026 ≤ v < 9391cc3a787a58aa224a6440d7f244d780ba2896, de0534df93474f268486c486ea7e01b44a478026 ≤ v < 2bd2774df0ce37920b23819a860a66fdbdd90823, de0534df93474f268486c486ea7e01b44a478026 ≤ v < b6054b9b239a493672f853b034570cca93ba7a88, de0534df93474f268486c486ea7e01b44a478026 ≤ v < bd1244561fa2a4531ded40dbf09c9599084f8b29, c1d44b93ca9f3ebc26b0de0a7f4b7156702762b6, 63c2b13ba0428b8f477e4adb1d40a50eb4493c09, 5.13.19 ≤ v < 5.14, 5.14.6 ≤ v < 5.15, 5.15 | 9391cc3a787a58aa224a6440d7f244d780ba2896, 2bd2774df0ce37920b23819a860a66fdbdd90823, b6054b9b239a493672f853b034570cca93ba7a88, bd1244561fa2a4531ded40dbf09c9599084f8b29, 5.14, 5.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.