
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-50566 is a memory leak vulnerability discovered in the Linux kernel's MTD (Memory Technology Device) subsystem. The issue occurs in the add_mtd_device() function when device registration fails, where the system fails to properly release allocated memory resources by not calling put_device() to give up the reference (NVD).
The vulnerability manifests as a kernel memory leak (kmemleak) when device registration fails in the add_mtd_device() function. The issue involves an unreferenced object of size 8 bytes, which was identified during the execution of the 'insmod' command. The hex dump of the leaked memory shows the pattern '6d 74 64 30 00 88 ff ff mtd0....' and occurs in the context of device name handling (NVD).
The vulnerability results in a memory leak in the Linux kernel, which could potentially lead to resource exhaustion over time if repeatedly triggered. While memory leaks are generally less severe than other vulnerability types, they can impact system stability and performance in long-running systems (NVD).
The vulnerability has been fixed in the Linux kernel by adding a proper call to put_device() when device registration fails in the add_mtd_device() function. System administrators should update to a patched version of the kernel to address this issue (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."