CVE-2022-50857 Details
Description
In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and list_del() is called to delete the port from rio_mports.
A vulnerability in the Linux kernel's RapidIO subsystem could lead to a name leak in the rio_register_mport function. When the device_register function fails, the name set by dev_set_name needs to be released. The current implementation does not properly handle this error, potentially allowing for a name leak. The issue arises because the reference to the device is not released in the error path, preventing the name from being cleared during the cleanup process. This vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0a71344f99289250e4d5b8adbac76f444485c840 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/117fede82e9d6ea3de30746d500eb5edc2eb8310 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/1bbad5793f404cf218757e3beb600eca6080330f | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/4ddbeae5f224d924cf0b12460dda88c7480aa452 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/97d9eb45ffa67ffa112a6659953321b8f7db0065 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/9abba4aa60874c5216fc8de7dededadc791de696 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/a47de2fd3f88a7788be19f94ade72c2244a98045 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/a73a626c0510d203e369aeb26c4d6ec9c75af027 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e92a216d16bde65d21a3227e0fb2aa0794576525 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |