{"id":"CVE-2022-50278","title":"PNP: fix name memory leak in pnp_alloc_dev()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nPNP: fix name memory leak in pnp_alloc_dev()\n\nAfter commit 1fa5ae857bb1 (\"driver core: get rid of struct device's\nbus_id string array\"), the name of device is allocated…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ea77b4b761cd75e5456f677311babfa0418f289a","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < bbcf772216aa237036cc3ae3158288d0a95aaf4d","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 81b024df4755e6bb6993b786584eca6eabbb9791","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < dac87e295cddc8ab316cff14ab2071b5221d84fa","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c12b314bb23dc0c83e03402cc84574700947e3b2","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 1f50c7497a5f89de0c31f2edf086af41ff834320","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 290dd73b943c95c006df973257076ff163adf4d0","Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 110d7b0325c55ff3620073ba4201845f59e22ebf","Linux 2.6.30"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:08:43.741440Z"},"published":"2025-09-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:32.599Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50278","references":[{"url":"https://git.kernel.org/stable/c/ea77b4b761cd75e5456f677311babfa0418f289a"},{"url":"https://git.kernel.org/stable/c/693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa"},{"url":"https://git.kernel.org/stable/c/bbcf772216aa237036cc3ae3158288d0a95aaf4d"},{"url":"https://git.kernel.org/stable/c/81b024df4755e6bb6993b786584eca6eabbb9791"},{"url":"https://git.kernel.org/stable/c/dac87e295cddc8ab316cff14ab2071b5221d84fa"},{"url":"https://git.kernel.org/stable/c/c12b314bb23dc0c83e03402cc84574700947e3b2"},{"url":"https://git.kernel.org/stable/c/1f50c7497a5f89de0c31f2edf086af41ff834320"},{"url":"https://git.kernel.org/stable/c/290dd73b943c95c006df973257076ff163adf4d0"},{"url":"https://git.kernel.org/stable/c/110d7b0325c55ff3620073ba4201845f59e22ebf"}],"tags":["cve.org"],"epss":0.00163,"epssPercentile":0.05553,"ingestedAt":"2026-11-05T22:38:31.718Z","slug":"CVE-2022-50278","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nPNP: fix name memory leak in pnp_alloc_dev()\n\nAfter commit 1fa5ae857bb1 (\"driver core: get rid of struct device's\nbus_id string array\"), the name of device is allocated dynamically,\nmove dev_set_name() after pnp_add_id() to avoid memory leak.\n\n## Affected\n\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ea77b4b761cd75e5456f677311babfa0418f289a`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < bbcf772216aa237036cc3ae3158288d0a95aaf4d`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 81b024df4755e6bb6993b786584eca6eabbb9791`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < dac87e295cddc8ab316cff14ab2071b5221d84fa`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c12b314bb23dc0c83e03402cc84574700947e3b2`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 1f50c7497a5f89de0c31f2edf086af41ff834320`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 290dd73b943c95c006df973257076ff163adf4d0`\n- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 110d7b0325c55ff3620073ba4201845f59e22ebf`\n- `Linux 2.6.30`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}