---
id: CVE-2022-49780
title: 'scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

  If device_register() fails in tcm_loop_setup_hba_bus(), the name allocated
  by dev_set_name()…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    41a6b8b527a5957fab41c3c05e25ad125268e2e9
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    28f7ff5e7559d226e63c7c5de74eb075a83d8c53
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    75205f1b47a88c3fac4f30bd7567e89b2887c7fd
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    a636772988bafab89278e7bb3420d8e8eacfe912
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    dce0589a3faec9e2e543e97bca7e62592ec85585
  - >-
    Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 <
    bc68e428d4963af0201e92159629ab96948f0893
  - Linux 2.6.39
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:47:35.495862Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T19:49:47.812Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49780'
references:
  - url: 'https://git.kernel.org/stable/c/41a6b8b527a5957fab41c3c05e25ad125268e2e9'
  - url: 'https://git.kernel.org/stable/c/28f7ff5e7559d226e63c7c5de74eb075a83d8c53'
  - url: 'https://git.kernel.org/stable/c/75205f1b47a88c3fac4f30bd7567e89b2887c7fd'
  - url: 'https://git.kernel.org/stable/c/a636772988bafab89278e7bb3420d8e8eacfe912'
  - url: 'https://git.kernel.org/stable/c/dce0589a3faec9e2e543e97bca7e62592ec85585'
  - url: 'https://git.kernel.org/stable/c/bc68e428d4963af0201e92159629ab96948f0893'
tags:
  - cve.org
epss: 0.00216
epssPercentile: 0.12082
ingestedAt: '2026-11-05T22:38:31.591Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

If device_register() fails in tcm_loop_setup_hba_bus(), the name allocated
by dev_set_name() need be freed. As comment of device_register() says, it
should use put_device() to give up the reference in the error path. So fix
this by calling put_device(), then the name can be freed in kobject_cleanup().
The 'tl_hba' will be freed in tcm_loop_release_adapter(), so it don't need
goto error label in this case.

## Affected

- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < 41a6b8b527a5957fab41c3c05e25ad125268e2e9`
- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < 28f7ff5e7559d226e63c7c5de74eb075a83d8c53`
- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < 75205f1b47a88c3fac4f30bd7567e89b2887c7fd`
- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < a636772988bafab89278e7bb3420d8e8eacfe912`
- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < dce0589a3faec9e2e543e97bca7e62592ec85585`
- `Linux >= 3703b2c5d041a68095cdd22380c23ce27d449ad7 < bc68e428d4963af0201e92159629ab96948f0893`
- `Linux 2.6.39`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.