PT-2025-40661 · Linux · Linux Kernel

Published 2025-10-04 · Updated 2025-10-04 · CVE-2022-50474

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the macio add one device() function within the Linux kernel’s macintosh component. Following a commit (1fa5ae857bb1) that altered device name allocation, a reference to the device was not properly released when of device register() failed. This resulted in a potential memory leak, as the allocated memory was not freed. The issue was addressed by calling put device() to decrement the reference count, allowing for proper cleanup via kobject cleanup() when the reference count reached zero. The kfree() function in macio release dev() was also removed as it was no longer necessary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-50474

Affected Products

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50474.json · Exploit
• https://git.kernel.org/stable/c/aa9054267366ff0a382d403d17728e21951ddbb9 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50474 · Vendor Advisory
• https://git.kernel.org/stable/c/76837e7f6b30da72ad59f56291e22804a219e015 · Patch
• https://ubuntu.com/security/CVE-2022-50474 · Vendor Advisory
• https://git.kernel.org/stable/c/2ac0a7059b7bcbed35bfffa34a82c9a9e99638ef · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50474 · Security Note
• https://git.kernel.org/stable/c/19ded60b40e86b0903c8d5bd0161437ed5107a8b · Patch
• https://git.kernel.org/stable/c/5ca86eae55a2f006e6c1edd2029b2cacb6979515 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50474 · Vendor Advisory
• https://git.kernel.org/stable/c/35858b87a943917fa30172aa4bf01ce7adbcb42c · Patch
• https://cve.org/CVERecord?id=CVE-2022-50474 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50474 · Vendor Advisory
• https://git.kernel.org/stable/c/ca765257feb89dacf604ced9cd233db5f865dee0 · Patch
• https://osv.dev/vulnerability/CVE-2022-50474 · Vendor Advisory