Bug 2405763 (CVE-2022-50561) - CVE-2022-50561 kernel: iio: fix memory leak in iio_device_register_eventset()
Summary: CVE-2022-50561 kernel: iio: fix memory leak in iio_device_register_eventset()
Keywords:
Status: NEW
Alias: CVE-2022-50561
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-22 14:05 UTC by OSIDB Bzimport
Modified: 2025-10-22 16:36 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-10-22 14:05:21 UTC 
In the Linux kernel, the following vulnerability has been resolved:

iio: fix memory leak in iio_device_register_eventset()

When iio_device_register_sysfs_group() returns failed,
iio_device_register_eventset() needs to free attrs array.

Otherwise, kmemleak would scan & report memory leak as below:

unreferenced object 0xffff88810a1cc3c0 (size 32):
  comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s)
  backtrace:
    __kmalloc+0x46/0x1b0
    iio_device_register_eventset at drivers/iio/industrialio-event.c:541
    __iio_device_register at drivers/iio/industrialio-core.c:1959
    __devm_iio_device_register at drivers/iio/industrialio-core.c:2040
Comment 1 Jon Moroney 2025-10-22 16:34:26 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025102206-CVE-2022-50561-3b76@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.