In the Linux kernel, the following vulnerability has been resolved:

ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()

dev_set_name() in soundbus_add_one() allocates memory for name, it need be
freed when of_device_register() fails, call soundbus_dev_put() to give up
the reference that hold in device_initialize(), so that it can be freed in
kobject_cleanup() when the refcount hit to 0. And other resources are also
freed in i2sbus_release_dev(), so it can return 0 directly.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00023.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < fd410d24665e4efb3c1796797181265efe553e9c
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < 802532a50acf501fdafe38a84ca2aa886d68af68
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < 027fee10e3a400cf6f3237374a1248da1082807b
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < 5bdea674534153110b90d70b02f2fbaf48b2c0eb
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < ce6fd1c382a38b75557db85a2fe99d285540a03d
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < e81d7826b8f40430a1ea1b330e24d9a9eb4512c4
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < c7524279c8ddc7dbf3463bec70e0289097959944
f3d9478b2ce468c3115b02ecae7e975990697f15 affected < 4a4c8482e370d697738a78dcd7bf2780832cb712
Linux Linux affected
Version Status Constraints
2.6.18 affected —
0 unaffected < 2.6.18
4.9.332 unaffected ≤ 4.9.*
4.14.298 unaffected ≤ 4.14.*
4.19.264 unaffected ≤ 4.19.*
5.4.223 unaffected ≤ 5.4.*
5.10.153 unaffected ≤ 5.10.*
5.15.77 unaffected ≤ 5.15.*
6.0.7 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/027fee10e3a400cf6f3237374a1248da1082807b cve-icon cve-icon
https://git.kernel.org/stable/c/4a4c8482e370d697738a78dcd7bf2780832cb712 cve-icon cve-icon
https://git.kernel.org/stable/c/5bdea674534153110b90d70b02f2fbaf48b2c0eb cve-icon cve-icon
https://git.kernel.org/stable/c/802532a50acf501fdafe38a84ca2aa886d68af68 cve-icon cve-icon
https://git.kernel.org/stable/c/c7524279c8ddc7dbf3463bec70e0289097959944 cve-icon cve-icon
https://git.kernel.org/stable/c/ce6fd1c382a38b75557db85a2fe99d285540a03d cve-icon cve-icon
https://git.kernel.org/stable/c/e81d7826b8f40430a1ea1b330e24d9a9eb4512c4 cve-icon cve-icon
https://git.kernel.org/stable/c/fd410d24665e4efb3c1796797181265efe553e9c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100158-CVE-2022-50431-b165@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50431 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50431 cve-icon
History

Tue, 20 Jan 2026 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() dev_set_name() in soundbus_add_one() allocates memory for name, it need be freed when of_device_register() fails, call soundbus_dev_put() to give up the reference that hold in device_initialize(), so that it can be freed in kobject_cleanup() when the refcount hit to 0. And other resources are also freed in i2sbus_release_dev(), so it can return 0 directly.
Title ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T11:42:09.700Z

Reserved: 2025-09-17T14:53:07.009Z

Link: CVE-2022-50431

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-01T12:15:34.840

Modified: 2026-01-20T15:36:51.517

Link: CVE-2022-50431

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2022-50431 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:40:01Z

Weaknesses