PT-2025-40664 · Linux+2 · Linux Kernel+2

Published 2022-11-15 · Updated 2025-10-04 · CVE-2022-50477

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the devm rtc allocate device() function. Specifically, if dev set name() fails after rtc device is allocated, a memory leak occurs. The fix involves moving devm add action or reset() before dev set name() to prevent this leak. The backtrace indicates the issue occurs during device probing, potentially within the rtc rx4581 module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Resource Exhaustion

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-770

CWE-400

CWE-404

CWE-401

Related Identifiers

BDU:2026-02272

CVE-2022-50477

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Linux Kernel

Red Hat

Rtc Rx4581

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50477.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-50477 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50477 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50477 · Vendor Advisory
• https://git.kernel.org/stable/c/0bcfc8fd3e596994f527b46730579428b3a4fa5f · Patch
• https://git.kernel.org/stable/c/59457a0f079eae19aaf322b3cc1c8ba66f55c5f3 · Patch
• https://git.kernel.org/stable/c/60da73808298ff2cfa9f165d55eb3d7aa7078601 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50477 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50477 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50477 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02272 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50477 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025100438-CVE-2022-50477-1815@gregkh/T · Note
• https://git.kernel.org/linus/60da73808298ff2cfa9f165d55eb3d7aa7078601 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note