In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/02dea987ec1cac712c78e75d224ceb9bb73519ed cve-icon cve-icon
https://git.kernel.org/stable/c/3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b cve-icon cve-icon
https://git.kernel.org/stable/c/455d99bd6baf19688048b6d42d9fa74eae27f93b cve-icon cve-icon
https://git.kernel.org/stable/c/7140d7aaf93da6a665b454f91bb4dc6b1de218bd cve-icon cve-icon
https://git.kernel.org/stable/c/90b7d055e2b5f39429f9a9e3815b48a48530ef28 cve-icon cve-icon
https://git.kernel.org/stable/c/9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143 cve-icon cve-icon
https://git.kernel.org/stable/c/b688a3ec235222d9a84e43a48a6f31acb95baf2d cve-icon cve-icon
https://git.kernel.org/stable/c/bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025050138-CVE-2022-49835-ea42@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49835 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49835 cve-icon
History

Sat, 21 Jun 2025 15:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

threat_severity

Low

Sat, 07 Jun 2025 03:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Fri, 02 May 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Thu, 01 May 2025 14:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources.
Title ALSA: hda: fix potential memleak in 'add_widget_node'
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-05-01T14:09:52.700Z

Updated: 2025-05-04T08:46:32.274Z

Reserved: 2025-05-01T14:05:17.228Z

Link: CVE-2022-49835

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-01T15:16:06.980

Modified: 2025-05-02T13:53:20.943

Link: CVE-2022-49835

cve-icon Redhat

Severity : Low

Publid Date: 2025-05-01T00:00:00Z

Links: CVE-2022-49835 - Bugzilla