CVE-2022-50810

Linux Kernel - Use-After-Free via RapidIO mport_cdev_open kfifo_alloc Failure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing put_device in mport_cdev_open When kfifo_alloc fails, the refcount of chdev->dev is left incremental. We should use put_device(&chdev->dev) to decrease the ref count of chdev->dev to avoid refcount leak.

References (9)

Core 9

Scores

EPSS 0.0024
EPSS Percentile 15.5%

Details

Status published
Products (28)
linux/Kernel 4.10.0 - 4.14.303linux
linux/Kernel 4.15.0 - 4.19.270linux
linux/Kernel 4.20.0 - 5.4.229linux
linux/Kernel 4.6.0 - 4.9.337linux
linux/Kernel 5.11.0 - 5.15.86linux
linux/Kernel 5.16.0 - 6.0.16linux
linux/Kernel 5.5.0 - 5.10.163linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 4.6
Linux/Linux 4.14.303 - 4.14.*
... and 18 more
Published Dec 30, 2025
Tracked Since Feb 18, 2026