CVE-2022-50566: mtd: Fix device name leak when register device failed in add_mtd_device()
Vulnerability summary
CVE-2022-50566 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 16.2% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 22-10-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is a kmemleak when register device failed: unreferenced object 0xffff888101aab550 (size 8): comm "insmod", pid 3922, jiffies 4295277753 (age 925.408s) hex dump (first 8 bytes): 6d 74 64 30 00 88 ff ff mtd0.... backtrace: [<00000000bde26724>] __kmalloc_node_track_caller+0x4e/0x150 [<000000003c32b416>] kvasprintf+0xb0/0x130 [<000000001f7a8f15>] kobject_set_name_vargs+0x2f/0xb0 [<000000006e781163>] dev_set_name+0xab/0xe0 [<00000000e30d0c78>] add_mtd_device+0x4bb/0x700 [<00000000f3d34de7>] mtd_device_parse_register+0x2ac/0x3f0 [<00000000c0d88488>] 0xffffffffa0238457 [<00000000b40d0922>] 0xffffffffa02a008f [<0000000023d17b9d>] do_one_initcall+0x87/0x2a0 [<00000000770f6ca6>] do_init_module+0xdf/0x320 [<000000007b6768fe>] load_module+0x2f98/0x3330 [<00000000346bed5a>] __do_sys_finit_module+0x113/0x1b0 [<00000000674c2290>] do_syscall_64+0x35/0x80 [<000000004c6a8d97>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 If register device failed, should call put_device() to give up the reference.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.25% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu119 products
- linuxAll versions (No fix recorded) | < 4.15.0-208.220 | < 5.4.0-144.161 | < 5.15.0-69.76
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1153.166 | < 5.4.0-1097.105 | < 5.15.0-1033.37
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.4-1
Linux1 product
- linux≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < a75f45afa932bfb24a2603ebcea5efd2e7cdcfd6 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < 2302e2dc42b1f84f951c725ce742fc21c5a1e151 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < db07fe76df01f40cb897d6e9066b84e46957beb3 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < fa0d32ab8407d7481450c664fd0de64f2dae9489 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < 330bc5533e8a8ed69cb951d5a8edce9bddb9db21 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < 71212d73184845c944ef1b43f092e643e5bde003 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < 1b172fb05d6315ecec082fd7544a3390e96f0d7e | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < bcabe1dc2a344adbb3382930a23e273ba9382277 | ≥ 1f24b5a8ecbb2a3c7080f418974d40e3ffedb221, < 895d68a39481a75c680aa421546931fb11942fa6 | 2.6.30
3 vendors · 121 products
