In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in device_add() is leaked. Never directly free @dev after calling device_register(), even if it returned an error! Always use put_device() to give up the reference initialized.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1695b1adcc3a7d985cd22fa3b55761edf3fab50d cve-icon cve-icon
https://git.kernel.org/stable/c/2bbb222a54ff501f77ce593d21b76b79c905045e cve-icon cve-icon
https://git.kernel.org/stable/c/35abbc8406cc39e72d3ce85f6e869555afe50d54 cve-icon cve-icon
https://git.kernel.org/stable/c/57c857353d5020bdec8284d9c0fee447484fe5e0 cve-icon cve-icon
https://git.kernel.org/stable/c/848c45964ded537107e010aaf353aa30a0855387 cve-icon cve-icon
https://git.kernel.org/stable/c/d861b7d41b17942b337d4b87a70de7cd1dc44d4e cve-icon cve-icon
https://git.kernel.org/stable/c/ee2715faf7e7153f5142ed09aacfa89a64d45dcb cve-icon cve-icon
https://git.kernel.org/stable/c/ef843ee20576039126d34d6eb5f45d14c3e6ce18 cve-icon cve-icon
https://git.kernel.org/stable/c/fd2c930cf6a5b9176382c15f9acb1996e76e25ad cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091640-CVE-2022-50349-cc37@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50349 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50349 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 16 Sep 2025 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in device_add() is leaked. Never directly free @dev after calling device_register(), even if it returned an error! Always use put_device() to give up the reference initialized.
Title misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-16T16:11:41.340Z

Updated: 2025-09-16T16:11:41.340Z

Reserved: 2025-09-16T16:03:27.882Z

Link: CVE-2022-50349

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-16T17:15:34.703

Modified: 2025-09-17T14:18:55.093

Link: CVE-2022-50349

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-16T00:00:00Z

Links: CVE-2022-50349 - Bugzilla