CVE-2022-49793

iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

MEDIUM
5.5
CVSS Score
Published: May 1, 2025 at 02:09 PM UTC
Updated: June 17, 2026 at 05:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() dev_set_name() allocates memory for name, it need be freed when device_add() fails, call put_device() to give up the reference that hold in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hit to 0. Fault injection test can trigger this: unreferenced object 0xffff8e8340a7b4c0 (size 32): comm "modprobe", pid 243, jiffies 4294678145 (age 48.845s) hex dump (first 32 bytes): 69 69 6f 5f 73 79 73 66 73 5f 74 72 69 67 67 65 iio_sysfs_trigge 72 00 a7 40 83 8e ff ff 00 86 13 c4 f6 ee ff ff r..@............ backtrace: [<0000000074999de8>] __kmem_cache_alloc_node+0x1e9/0x360 [<00000000497fd30b>] __kmalloc_node_track_caller+0x44/0x1a0 [<000000003636c520>] kstrdup+0x2d/0x60 [<0000000032f84da2>] kobject_set_name_vargs+0x1e/0x90 [<0000000092efe493>] dev_set_name+0x4e/0x70

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.0 ≤ v < 4.14.3003.0 ≤ v < 4.19.2673.0 ≤ v < 4.9.3343.0 ≤ v < 5.10.1563.0 ≤ v < 5.15.803.0 ≤ v < 5.4.2253.0 ≤ v < 6.0.103.0 ≤ v < 6.14.10 ≤ v < 4.14.3004.15 ≤ v < 4.19.2674.20 ≤ v < 5.4.2255.11 ≤ v < 5.15.805.16 ≤ v < 6.0.105.5 ≤ v < 5.10.1561f785681a87068f123d3e23da13b2c55ab4f93ac3.06.1 rc16.1 rc26.1 rc36.1 rc46.1 rc5
Vendor states this is fixed in 0dd52e141afde089304de470148d311b05c14564 (fixed)
Vendor states this is fixed in 2c4e65285bdea23fd36d2ff376006ac64db6f42e (fixed)
Vendor states this is fixed in 5a39382aa5411d64b25a71516c2c7480aab13bb7 (fixed)
Vendor states this is fixed in 656f670613662b6cc77aad14112db2803ad18fa8 (fixed)
Vendor states this is fixed in 8dddf2699da296c84205582aaead6b43dd7e8c4b (fixed)
Vendor states this is fixed in b47bb521961f027b4dcf8683337a7a1ba9e5ea1f (fixed)
Vendor states this is fixed in efa17e90e1711bdb084e3954fa44afb6647331c0 (fixed)
Vendor states this is fixed in f68c96821b61d2c71a35dbb8bf90c347fad624d9 (fixed)
Vendor states this is fixed in 3.0 (unaffected)
Vendor states this is fixed in 4.14.300 (unaffected)
Vendor states this is fixed in 4.19.267 (unaffected)
Vendor states this is fixed in 4.9.334 (unaffected)
Vendor states this is fixed in 5.10.156 (unaffected)
Vendor states this is fixed in 5.15.80 (unaffected)
Vendor states this is fixed in 5.4.225 (unaffected)
Vendor states this is fixed in 6.0.10 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0dd52e141afde089304de470148d311b05c14564
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2c4e65285bdea23fd36d2ff376006ac64db6f42e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5a39382aa5411d64b25a71516c2c7480aab13bb7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/656f670613662b6cc77aad14112db2803ad18fa8
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8dddf2699da296c84205582aaead6b43dd7e8c4b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b47bb521961f027b4dcf8683337a7a1ba9e5ea1f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/efa17e90e1711bdb084e3954fa44afb6647331c0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f68c96821b61d2c71a35dbb8bf90c347fad624d9

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card