In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macio_add_one_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically. It needs to be freed when of_device_register() fails. Call put_device() to give up the reference that's taken in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hits 0. macio device is freed in macio_release_dev(), so the kfree() can be removed.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/19ded60b40e86b0903c8d5bd0161437ed5107a8b cve-icon cve-icon
https://git.kernel.org/stable/c/2ac0a7059b7bcbed35bfffa34a82c9a9e99638ef cve-icon cve-icon
https://git.kernel.org/stable/c/35858b87a943917fa30172aa4bf01ce7adbcb42c cve-icon cve-icon
https://git.kernel.org/stable/c/3a866ff6fc2232c8e393cdb55ffb8ce947349e03 cve-icon cve-icon
https://git.kernel.org/stable/c/5ca86eae55a2f006e6c1edd2029b2cacb6979515 cve-icon cve-icon
https://git.kernel.org/stable/c/76837e7f6b30da72ad59f56291e22804a219e015 cve-icon cve-icon
https://git.kernel.org/stable/c/aa9054267366ff0a382d403d17728e21951ddbb9 cve-icon cve-icon
https://git.kernel.org/stable/c/b29a2f1dd33ae9b94821ab2f4d398b9081786748 cve-icon cve-icon
https://git.kernel.org/stable/c/ca765257feb89dacf604ced9cd233db5f865dee0 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100437-CVE-2022-50474-7639@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50474 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50474 cve-icon
History

Mon, 06 Oct 2025 22:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 06 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 04 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macio_add_one_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically. It needs to be freed when of_device_register() fails. Call put_device() to give up the reference that's taken in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hits 0. macio device is freed in macio_release_dev(), so the kfree() can be removed.
Title macintosh: fix possible memory leak in macio_add_one_device()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-04T15:16:35.537Z

Reserved: 2025-10-04T15:13:33.467Z

Link: CVE-2022-50474

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-04T16:15:43.910

Modified: 2025-10-06T14:56:47.823

Link: CVE-2022-50474

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-04T00:00:00Z

Links: CVE-2022-50474 - Bugzilla