HomeDefectsLIN1022-19815
Fixed

LIN1022-19815 : Security Advisory - linux - CVE-2022-50672

Created: Dec 10, 2025    Updated: Dec 11, 2025
Resolved Date: Dec 10, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.5
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]mailbox: zynq-ipi: fix error handling while device_register() fails[EOL][EOL]If device_register() fails, it has two issues:[EOL]1. The name allocated by dev_set_name() is leaked.[EOL]2. The parent of device is not NULL, device_unregister() is called[EOL]   in zynqmp_ipi_free_mboxes(), it will lead a kernel crash because[EOL]   of removing not added device.[EOL][EOL]Call put_device() to give up the reference, so the name is freed in[EOL]kobject_cleanup(). Add device registered check in zynqmp_ipi_free_mboxes()[EOL]to avoid null-ptr-deref.
Live chat
Online