CVE-2022-50578

CVE-2022-50578 is a Linux kernel issue addressed in several security advisories (EulerOS/SUSE), involving a memory-leak in the class registration path. The root cause is in __class_register where, if class_add_groups() fails, the code attempted to unregister and free resources improperly, risking...

CVE-2022-50578: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: class: fix possible memory leak in classregister If classaddgroups returns error, the 'cp-subsys' need be unregister, and the 'cp' need be freed. We can not call ksetunregister here, because the 'cls' will be freed in callback...