---
id: CVE-2022-50331
title: 'wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()

  Inject fault while probing module, if device_register() fails,
  but the refcount of kobject is not decrease…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 <
    50c31fa952309536c6e4461ff815ddccc8dff9d5
  - >-
    Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 <
    d87973314aba6de80a49f4271dd9be4ddc08e729
  - >-
    Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 <
    258ad2fe5ede773625adfda88b173f4123e59f45
  - Linux 5.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:10:07.483628Z'
published: '2025-09-15'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:35.651Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50331'
references:
  - url: 'https://git.kernel.org/stable/c/50c31fa952309536c6e4461ff815ddccc8dff9d5'
  - url: 'https://git.kernel.org/stable/c/d87973314aba6de80a49f4271dd9be4ddc08e729'
  - url: 'https://git.kernel.org/stable/c/258ad2fe5ede773625adfda88b173f4123e59f45'
tags:
  - cve.org
epss: 0.00157
epssPercentile: 0.04885
ingestedAt: '2026-11-05T22:38:31.727Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()

Inject fault while probing module, if device_register() fails,
but the refcount of kobject is not decreased to 0, the name
allocated in dev_set_name() is leaked. Fix this by calling
put_device(), so that name can be freed in callback function
kobject_cleanup().

unreferenced object 0xffff88810152ad20 (size 8):
  comm "modprobe", pid 252, jiffies 4294849206 (age 22.713s)
  hex dump (first 8 bytes):
    68 77 73 69 6d 30 00 ff                          hwsim0..
  backtrace:
    [<000000009c3504ed>] __kmalloc_node_track_caller+0x44/0x1b0
    [<00000000c0228a5e>] kvasprintf+0xb5/0x140
    [<00000000cff8c21f>] kvasprintf_const+0x55/0x180
    [<0000000055a1e073>] kobject_set_name_vargs+0x56/0x150
    [<000000000a80b139>] dev_set_name+0xab/0xe0

## Affected

- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 50c31fa952309536c6e4461ff815ddccc8dff9d5`
- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < d87973314aba6de80a49f4271dd9be4ddc08e729`
- `Linux >= f36a111a74e71edbba27d4c0cf3d7bbccc172108 < 258ad2fe5ede773625adfda88b173f4123e59f45`
- `Linux 5.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.