CVE-2022-49050: memory: renesas-rpc-if: fix platform-device leak in error path

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix platform-device leak in error path Make sure to free the flash platform device in the event that registration fails during probe.

Affected products

Linux kernel: from 5.9 before 5.10.112; from 5.11 before 5.15.35; from 5.16 before 5.17.4; 5.18-rc1, 5.18-rc2 — fixed in 5.10.112, 5.15.35, 5.17.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.112, 5.15.35, 5.17.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/05d1824a7fb43ab9adb1eb82404954af81d8c984
https://git.kernel.org/stable/c/66b9b707ea4dcafca92b6261c6924652914e3b73
https://git.kernel.org/stable/c/b452dbf24d7d9a990d70118462925f6ee287d135
https://git.kernel.org/stable/c/c089ffc846c85f200db34ad208338f4f81a6d82d

Get alerted when CVE-2022-49050 or the next vulnerability affects your stack