---
id: CVE-2022-50278
title: 'PNP: fix name memory leak in pnp_alloc_dev()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  PNP: fix name memory leak in pnp_alloc_dev()

  After commit 1fa5ae857bb1 ("driver core: get rid of struct device's
  bus_id string array"), the name of device is allocated…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    ea77b4b761cd75e5456f677311babfa0418f289a
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    bbcf772216aa237036cc3ae3158288d0a95aaf4d
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    81b024df4755e6bb6993b786584eca6eabbb9791
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    dac87e295cddc8ab316cff14ab2071b5221d84fa
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    c12b314bb23dc0c83e03402cc84574700947e3b2
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    1f50c7497a5f89de0c31f2edf086af41ff834320
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    290dd73b943c95c006df973257076ff163adf4d0
  - >-
    Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e <
    110d7b0325c55ff3620073ba4201845f59e22ebf
  - Linux 2.6.30
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:08:43.741440Z'
published: '2025-09-15'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:32.599Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50278'
references:
  - url: 'https://git.kernel.org/stable/c/ea77b4b761cd75e5456f677311babfa0418f289a'
  - url: 'https://git.kernel.org/stable/c/693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa'
  - url: 'https://git.kernel.org/stable/c/bbcf772216aa237036cc3ae3158288d0a95aaf4d'
  - url: 'https://git.kernel.org/stable/c/81b024df4755e6bb6993b786584eca6eabbb9791'
  - url: 'https://git.kernel.org/stable/c/dac87e295cddc8ab316cff14ab2071b5221d84fa'
  - url: 'https://git.kernel.org/stable/c/c12b314bb23dc0c83e03402cc84574700947e3b2'
  - url: 'https://git.kernel.org/stable/c/1f50c7497a5f89de0c31f2edf086af41ff834320'
  - url: 'https://git.kernel.org/stable/c/290dd73b943c95c006df973257076ff163adf4d0'
  - url: 'https://git.kernel.org/stable/c/110d7b0325c55ff3620073ba4201845f59e22ebf'
tags:
  - cve.org
epss: 0.00163
epssPercentile: 0.05553
ingestedAt: '2026-11-05T22:38:31.718Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

PNP: fix name memory leak in pnp_alloc_dev()

After commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
move dev_set_name() after pnp_add_id() to avoid memory leak.

## Affected

- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < ea77b4b761cd75e5456f677311babfa0418f289a`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 693a0c13c1f0c0fcaa1e38cb806cc0789bd415aa`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < bbcf772216aa237036cc3ae3158288d0a95aaf4d`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 81b024df4755e6bb6993b786584eca6eabbb9791`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < dac87e295cddc8ab316cff14ab2071b5221d84fa`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < c12b314bb23dc0c83e03402cc84574700947e3b2`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 1f50c7497a5f89de0c31f2edf086af41ff834320`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 290dd73b943c95c006df973257076ff163adf4d0`
- `Linux >= 1fa5ae857bb14f6046205171d98506d8112dd74e < 110d7b0325c55ff3620073ba4201845f59e22ebf`
- `Linux 2.6.30`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.