Not yet scoredPublished Dec 8, 2025

CVE-2022-50669misc: ocxl: fix possible name leak in ocxl_file_register_afu()

Updated under an hour ago (Oct 26, 2026, 10:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxl_file_register_afu() If device_register() returns error in ocxl_file_register_afu(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanup(), and info is freed in info_release().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	75ca758adbafc81804c39b2c200ecdc819a6c042 builds before 0cd05062371a49774e8a45258bdedf0bd6d3d327; from 75ca758adbafc81804c39b2c200ecdc819a6c042 before 7525741cb302a1672b8c3a5edb2a08e4229b5c7c; from 75ca758adbafc81804c39b2c200ecdc819a6c042 before 3299983a6bf628249ac650908e62d12de959341e; from 75ca758adbafc81804c39b2c200ecdc819a6c042 before 557b7de055d1e230ddb6664c29d26917b8db9143; 75ca758adbafc81804c39b2c200ecdc819a6c042 builds before 2fce8b3583d1641a1716486f408478b58e96ec91; from 75ca758adbafc81804c39b2c200ecdc819a6c042 before a4cb1004aeed2ab893a058fad00a5b41a12c4691	CNA record

References

References

https://git.kernel.org/stable/c/0cd05062371a49774e8a45258bdedf0bd6d3d327
https://git.kernel.org/stable/c/7525741cb302a1672b8c3a5edb2a08e4229b5c7c
https://git.kernel.org/stable/c/3299983a6bf628249ac650908e62d12de959341e
https://git.kernel.org/stable/c/557b7de055d1e230ddb6664c29d26917b8db9143
https://git.kernel.org/stable/c/2fce8b3583d1641a1716486f408478b58e96ec91
https://git.kernel.org/stable/c/a4cb1004aeed2ab893a058fad00a5b41a12c4691

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.