Not yet scoredPublished Dec 30, 2025

CVE-2022-50857rapidio: rio: fix possible name leak in rio_register_mport()

Updated under an hour ago (Oct 27, 2026, 9:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio_register_mport() If device_register() returns error, the name allocated by dev_set_name() need be freed. It should use put_device() to give up the reference in the error path, so that the name can be freed in kobject_cleanup(), and list_del() is called to delete the port from rio_mports.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	2aaf308b95b24649a6dcfed89cd956e972089b2a builds before 0a71344f99289250e4d5b8adbac76f444485c840; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before 117fede82e9d6ea3de30746d500eb5edc2eb8310; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before a73a626c0510d203e369aeb26c4d6ec9c75af027; 2aaf308b95b24649a6dcfed89cd956e972089b2a builds before 1bbad5793f404cf218757e3beb600eca6080330f; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before 97d9eb45ffa67ffa112a6659953321b8f7db0065; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before a47de2fd3f88a7788be19f94ade72c2244a98045; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before 4ddbeae5f224d924cf0b12460dda88c7480aa452; from 2aaf308b95b24649a6dcfed89cd956e972089b2a before 9abba4aa60874c5216fc8de7dededadc791de696; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/0a71344f99289250e4d5b8adbac76f444485c840
https://git.kernel.org/stable/c/117fede82e9d6ea3de30746d500eb5edc2eb8310
https://git.kernel.org/stable/c/a73a626c0510d203e369aeb26c4d6ec9c75af027
https://git.kernel.org/stable/c/1bbad5793f404cf218757e3beb600eca6080330f
https://git.kernel.org/stable/c/97d9eb45ffa67ffa112a6659953321b8f7db0065
https://git.kernel.org/stable/c/a47de2fd3f88a7788be19f94ade72c2244a98045
https://git.kernel.org/stable/c/4ddbeae5f224d924cf0b12460dda88c7480aa452
https://git.kernel.org/stable/c/9abba4aa60874c5216fc8de7dededadc791de696
https://git.kernel.org/stable/c/e92a216d16bde65d21a3227e0fb2aa0794576525

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.