CVE-2022-50331
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
03/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()<br />
<br />
Inject fault while probing module, if device_register() fails,<br />
but the refcount of kobject is not decreased to 0, the name<br />
allocated in dev_set_name() is leaked. Fix this by calling<br />
put_device(), so that name can be freed in callback function<br />
kobject_cleanup().<br />
<br />
unreferenced object 0xffff88810152ad20 (size 8):<br />
comm "modprobe", pid 252, jiffies 4294849206 (age 22.713s)<br />
hex dump (first 8 bytes):<br />
68 77 73 69 6d 30 00 ff hwsim0..<br />
backtrace:<br />
[] __kmalloc_node_track_caller+0x44/0x1b0<br />
[] kvasprintf+0xb5/0x140<br />
[] kvasprintf_const+0x55/0x180<br />
[] kobject_set_name_vargs+0x56/0x150<br />
[] dev_set_name+0xab/0xe0
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.14 (including) | 5.15.76 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.0.6 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



