PT-2025-53975 · Linux · Linux Kernel
Published
2022-11-30
·
Updated
2025-12-30
·
CVE-2022-50857
CVSS v2.0
5.2
Medium
| Vector | AV:A/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the rapidio subsystem and the
rio register mport() function. Specifically, if the device register() function returns an error, the name allocated by dev set name() is not properly freed. This occurs because the code fails to use put device() in the error path, preventing the name from being freed during kobject cleanup and the port's removal from the rio mports list. This results in a potential name leak.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel