{"id":"CVE-2022-50331","title":"wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decrease…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 50c31fa952309536c6e4461ff815ddccc8dff9d5","Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < d87973314aba6de80a49f4271dd9be4ddc08e729","Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 258ad2fe5ede773625adfda88b173f4123e59f45","Linux 5.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:10:07.483628Z"},"published":"2025-09-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:35.651Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50331","references":[{"url":"https://git.kernel.org/stable/c/50c31fa952309536c6e4461ff815ddccc8dff9d5"},{"url":"https://git.kernel.org/stable/c/d87973314aba6de80a49f4271dd9be4ddc08e729"},{"url":"https://git.kernel.org/stable/c/258ad2fe5ede773625adfda88b173f4123e59f45"}],"tags":["cve.org"],"epss":0.00157,"epssPercentile":0.04885,"ingestedAt":"2026-11-05T22:38:31.727Z","slug":"CVE-2022-50331","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff88810152ad20 (size 8):\n  comm \"modprobe\", pid 252, jiffies 4294849206 (age 22.713s)\n  hex dump (first 8 bytes):\n    68 77 73 69 6d 30 00 ff                          hwsim0..\n  backtrace:\n    [<000000009c3504ed>] __kmalloc_node_track_caller+0x44/0x1b0\n    [<00000000c0228a5e>] kvasprintf+0xb5/0x140\n    [<00000000cff8c21f>] kvasprintf_const+0x55/0x180\n    [<0000000055a1e073>] kobject_set_name_vargs+0x56/0x150\n    [<000000000a80b139>] dev_set_name+0xab/0xe0\n\n## Affected\n\n- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 50c31fa952309536c6e4461ff815ddccc8dff9d5`\n- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < d87973314aba6de80a49f4271dd9be4ddc08e729`\n- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 258ad2fe5ede773625adfda88b173f4123e59f45`\n- `Linux 5.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}