CVE-2022-50278

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the pnp alloc dev() function within the Linux kernel's PNP (Plug and Play) subsystem. The issue stemmed from dynamically allocated device names not being properly freed after a specific commit (1fa5ae857bb1, "driver core: get rid of struct device's bus id string array"). This occurred because the device name was allocated before the PNP ID was added, leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.