PT-2025-53038 · Linux · Linux Kernel
Published
2022-09-24
·
Updated
2025-12-26
·
CVE-2022-50734
CVSS v2.0
5.5
Medium
| Vector | AV:A/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak exists in the
nvmem register() function within the Linux kernel's nvmem core. The dev set name function allocates memory for nvmem->dev.kobj.name, but this memory is not freed if nvmem validate keepouts() fails before the device is registered. Moving nvmem validate keepouts() after device register() allows the device core to handle cleaning up the name in error cases, resolving the memory leak.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel