CVE-2022-49794

iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() If iio_trigger_register() returns error, it should call iio_trigger_free() to give up the reference that hold in iio_trigger_alloc(), so that it can call iio_trig_release() to free memory when the refcount hit to 0.

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/c3ce73f60599a483dca7becd4112508833a40ef9
https://git.kernel.org/stable/c/a0d98ae5a62a7bbad8fcf9fa22e0a1274197bbc4
https://git.kernel.org/stable/c/2b29a7f2d52fb5281b30cf61c947d88bab18a29b
https://git.kernel.org/stable/c/7b75515728b628a9a7540f201efdeb8ca7299385
https://git.kernel.org/stable/c/85d2a8b287a89853c0dcfc5a97b5e9d36376fe37
https://git.kernel.org/stable/c/1bf8c0aff8fb5c4edf3ba6728e6bedbd610d7f4b
https://git.kernel.org/stable/c/c27a3b6ba23350708cf5ab9962337447b51eb76d
https://git.kernel.org/stable/c/65f20301607d07ee279b0804d11a05a62a6c1a1c

Frequently Asked Questions

What is the severity of CVE-2022-49794?: CVE-2022-49794 has not yet been assigned a CVSS score.
How to fix CVE-2022-49794?: To fix CVE-2022-49794, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49794 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49794 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49794?: CVE-2022-49794 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.