In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/19aa3c98ed7b2616e105946cec804f897837ab84 cve-icon cve-icon
https://git.kernel.org/stable/c/261041097ab3470f1120b7733cbf472712304d1e cve-icon cve-icon
https://git.kernel.org/stable/c/31cdf7897dba1f096b74f69d840f0575b8cdb9ae cve-icon cve-icon
https://git.kernel.org/stable/c/41ed61364285ff38bbbe9ca8a45c8372ba72921d cve-icon cve-icon
https://git.kernel.org/stable/c/6a4760463dbc6b603690938c468839985189ce0a cve-icon cve-icon
https://git.kernel.org/stable/c/879356a6a05559582b0a7895d86d2d4359745c08 cve-icon cve-icon
https://git.kernel.org/stable/c/c32f6b6196b6efc1c68990dfeaac36fb8eb3b8e1 cve-icon cve-icon
https://git.kernel.org/stable/c/db3a61ef8e6aef3b888baa6a85926c2230c2cc56 cve-icon cve-icon
https://git.kernel.org/stable/c/ffb8e92b4cef92bd25563cf3d8b4489eb22bc61f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022622-CVE-2022-49224-8d81@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49224 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49224 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 18 Mar 2025 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add()： If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put().
Title power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:55:54.755Z

Updated: 2025-10-01T19:47:04.090Z

Reserved: 2025-02-26T01:49:39.293Z

Link: CVE-2022-49224

cve-icon Vulnrichment

Updated: 2025-10-01T16:10:21.294Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:00:59.457

Modified: 2025-10-01T20:15:57.640

Link: CVE-2022-49224

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49224 - Bugzilla