CVE-2022-49780

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
02/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()<br /> <br /> If device_register() fails in tcm_loop_setup_hba_bus(), the name allocated<br /> by dev_set_name() need be freed. As comment of device_register() says, it<br /> should use put_device() to give up the reference in the error path. So fix<br /> this by calling put_device(), then the name can be freed in kobject_cleanup().<br /> The &amp;#39;tl_hba&amp;#39; will be freed in tcm_loop_release_adapter(), so it don&amp;#39;t need<br /> goto error label in this case.

Impact