Not yet scoredPublished Oct 22, 2025

CVE-2022-50561iio: fix memory leak in iio_device_register_eventset()

Updated under an hour ago (Oct 26, 2026, 4:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iio_device_register_eventset() When iio_device_register_sysfs_group() returns failed, iio_device_register_eventset() needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced object 0xffff88810a1cc3c0 (size 32): comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s) backtrace: __kmalloc+0x46/0x1b0 iio_device_register_eventset at drivers/iio/industrialio-event.c:541 __iio_device_register at drivers/iio/industrialio-core.c:1959 __devm_iio_device_register at drivers/iio/industrialio-core.c:2040

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 32f171724e5cbecc80594fb6eced057cfdd6eb6f before dc6afd6070f3a5b086c8c5cfa6ded63ae44494da; 32f171724e5cbecc80594fb6eced057cfdd6eb6f builds before 5de3add7509c95685f1185683b817dd206c4b1f1; from 32f171724e5cbecc80594fb6eced057cfdd6eb6f before a154b1c139fbf6a49762159be81d425d41ceec87; from 32f171724e5cbecc80594fb6eced057cfdd6eb6f before 86fdd15e10e404e70ecb2a3bff24d70356d42b36	CNA record

References

References

https://git.kernel.org/stable/c/dc6afd6070f3a5b086c8c5cfa6ded63ae44494da
https://git.kernel.org/stable/c/5de3add7509c95685f1185683b817dd206c4b1f1
https://git.kernel.org/stable/c/a154b1c139fbf6a49762159be81d425d41ceec87
https://git.kernel.org/stable/c/86fdd15e10e404e70ecb2a3bff24d70356d42b36

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.