CVE-2022-50561

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the iio device register eventset() function. Specifically, when iio device register sysfs group() fails, the attrs array is not freed, leading to a memory leak detected by kmemleak. The affected code is located at drivers/iio/industrialio-event.c:541, drivers/iio/industrialio-core.c:1959, and drivers/iio/industrialio-core.c:2040. The backtrace indicates the involvement of kmalloc and functions related to device registration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.