CVE-2022-50304

MEDIUM

Linux Kernel - Use-After-Free in MTD Core init_mtd()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: core: fix possible resource leak in init_mtd() I got the error report while inject fault in init_mtd(): sysfs: cannot create duplicate filename '/devices/virtual/bdi/mtd-0' Call Trace: <TASK> dump_stack_lvl+0x67/0x83 sysfs_warn_dup+0x60/0x70 sysfs_create_dir_ns+0x109/0x120 kobject_add_internal+0xce/0x2f0 kobject_add+0x98/0x110 device_add+0x179/0xc00 device_create_groups_vargs+0xf4/0x100 device_create+0x7b/0xb0 bdi_register_va.part.13+0x58/0x2d0 bdi_register+0x9b/0xb0 init_mtd+0x62/0x171 [mtd] do_one_initcall+0x6c/0x3c0 do_init_module+0x58/0x222 load_module+0x268e/0x27d0 __do_sys_finit_module+0xd5/0x140 do_syscall_64+0x37/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK> kobject_add_internal failed for mtd-0 with -EEXIST, don't try to register things with the same name in the same directory. Error registering mtd class or bdi: -17 If init_mtdchar() fails in init_mtd(), mtd_bdi will not be unregistered, as a result, we can't load the mtd module again, to fix this by calling bdi_unregister(mtd_bdi) after out_procfs label.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 4.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (11)
linux/Kernel 4.10.0 - 6.0.16linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 4.10
Linux/Linux 4.10
Linux/Linux 445caaa20c4d6da74f426464f90513b81157ad77 - 1aadf01e5076b9ab6bf294b9622335c651314895
Linux/Linux 445caaa20c4d6da74f426464f90513b81157ad77 - 26c304a3f136009c5a2a04e2bf3ac6aa25aabcb4
Linux/Linux 445caaa20c4d6da74f426464f90513b81157ad77 - 78816504100cbd8e6836df9f58cc4fbb8b262f1c
Linux/Linux 6.0.16 - 6.0.*
Linux/Linux 6.1.2 - 6.1.*
Linux/Linux 6.2
... and 1 more
Published Sep 15, 2025
Tracked Since Feb 18, 2026