In the Linux kernel, the following vulnerability has been resolved:
misc: ocxl: fix possible name leak in ocxlfileregister_afu()
If deviceregister() returns error in ocxlfileregisterafu(), the name allocated by devsetname() need be freed. As comment of deviceregister() says, it should use putdevice() to give up the reference in the error path. So fix this by calling putdevice(), then the name can be freed in kobjectcleanup(), and info is freed in info_release().
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50669.json",
"cna_assigner": "Linux"
}