CVE-2022-49835

ALSA: hda: fix potential memleak in 'add_widget_node'

MEDIUM

5.5

CVSS Score

Published: May 1, 2025 at 02:09 PM UTC

Updated: June 17, 2026 at 05:19 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.9.3344.1 ≤ v < 4.14.3004.1 ≤ v < 4.19.2674.1 ≤ v < 4.9.3344.1 ≤ v < 5.10.1554.1 ≤ v < 5.15.794.1 ≤ v < 5.4.2254.1 ≤ v < 6.0.94.1 ≤ v < 6.14.10 ≤ v < 4.14.3004.15 ≤ v < 4.19.2674.20 ≤ v < 5.4.2255.11 ≤ v < 5.15.795.16 ≤ v < 6.0.95.5 ≤ v < 5.10.1553256be6537751f65c76b3ecfbb4e667f87525a2f4.1 6.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4

Vendor states this is fixed in 02dea987ec1cac712c78e75d224ceb9bb73519ed (fixed)

Vendor states this is fixed in 3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b (fixed)

Vendor states this is fixed in 455d99bd6baf19688048b6d42d9fa74eae27f93b (fixed)

Vendor states this is fixed in 7140d7aaf93da6a665b454f91bb4dc6b1de218bd (fixed)

Vendor states this is fixed in 90b7d055e2b5f39429f9a9e3815b48a48530ef28 (fixed)

Vendor states this is fixed in 9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143 (fixed)

Vendor states this is fixed in b688a3ec235222d9a84e43a48a6f31acb95baf2d (fixed)

Vendor states this is fixed in bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7 (fixed)

Vendor states this is fixed in 4.1 (unaffected)

Vendor states this is fixed in 4.14.300 (unaffected)

Vendor states this is fixed in 4.19.267 (unaffected)

Vendor states this is fixed in 4.9.334 (unaffected)