CVE-2022-50523
published 2025-10-07CVE-2022-50523: In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fails…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
If clk_register() fails, @pll->rate_table may have allocated memory by
kmemdup(), so it needs to be freed, otherwise will cause memory leak
issue, this patch fixes it.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < 20201c3a0a32f127fa4bdf379d6ac01c2978702d | 20201c3a0a32f127fa4bdf379d6ac01c2978702d |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < 86e1e080ad14c5fb6c14a5f0eb530b1b38cbc968 | 86e1e080ad14c5fb6c14a5f0eb530b1b38cbc968 |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < f02c1d8dc8d880cbaaf9094b4f396fe868ee23ff | f02c1d8dc8d880cbaaf9094b4f396fe868ee23ff |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < 26b94635f1c84d7f6cb482179125cb17e59c90a5 | 26b94635f1c84d7f6cb482179125cb17e59c90a5 |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < f4d70c139d313948e02360304a6cbcd3a4f5deb5 | f4d70c139d313948e02360304a6cbcd3a4f5deb5 |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < 5b0a1f1247cd42ac5e0d369f8dbb58762692edee | 5b0a1f1247cd42ac5e0d369f8dbb58762692edee |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < dcd4ba068b194c6ef0071491aa3f12bec8c14d5b | dcd4ba068b194c6ef0071491aa3f12bec8c14d5b |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < f2ffb8653ea85ae39ce44347751fcc4c3e41f6bb | f2ffb8653ea85ae39ce44347751fcc4c3e41f6bb |
| linux | linux | >= 90c590254051f511299538c158e12fdad41ce163 < 739a6a6bbdb793bd57938cb24aa5a6df89983546 | 739a6a6bbdb793bd57938cb24aa5a6df89983546 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 3.17 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.1 clk rockchip_clk_register_pll memory leak (WID-SEC-2025-2229)
vuldb·2026-04-19·CVSS 5.5
CVE-2022-50523 [MEDIUM] Linux Kernel up to 6.1.1 clk rockchip_clk_register_pll memory leak (WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 6.1.1. It has been classified as critical. This affects the function rockchip_clk_register_pll of the component clk. Performing a manipulation results in memory leak.
This vulnerability was named CVE-2022-50523. The attack needs to be approached within the local network. There is no available exploit.
Upgrading the affected component is recommended.
OSV
CVE-2022-50523: In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fa
osv·2025-10-07·CVSS 5.5
CVE-2022-50523 [MEDIUM] CVE-2022-50523: In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fa
In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, otherwise will cause memory leak issue, this patch fixes it.
GHSA
GHSA-hgg3-j5ph-4m9j: In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
If clk_register()
ghsa_unreviewed·2025-10-07
CVE-2022-50523 [MEDIUM] CWE-401 GHSA-hgg3-j5ph-4m9j: In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
If clk_register()
In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
If clk_register() fails, @pll->rate_table may have allocated memory by
kmemdup(), so it needs to be freed, otherwise will cause memory leak
issue, this patch fixes it.
Red Hat
kernel: clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
vendor_redhat·2025-10-07·CVSS 5.5
CVE-2022-50523 [MEDIUM] CWE-771 kernel: clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
kernel: clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
If clk_register() fails, @pll->rate_table may have allocated memory by
kmemdup(), so it needs to be freed, otherwise will cause memory leak
issue, this patch fixes it.
A memory leak flaw was found in the Linux kernel's Rockchip clock driver in the PLL registration error path.
A local user on systems with Rockchip hardware can trigger this issue when PLL clock registration fails, causing the driver to return without freeing memory previously allocated by kmemdup for the rate table. This results in a permanent memory leak that accumulates across registration failure cycles, leading to resource
Debian
CVE-2022-50523: linux - In the Linux kernel, the following vulnerability has been resolved: clk: rockch...
vendor_debian·2022·CVSS 5.5
CVE-2022-50523 [MEDIUM] CVE-2022-50523: linux - In the Linux kernel, the following vulnerability has been resolved: clk: rockch...
In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, otherwise will cause memory leak issue, this patch fixes it.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/20201c3a0a32f127fa4bdf379d6ac01c2978702dhttps://git.kernel.org/stable/c/26b94635f1c84d7f6cb482179125cb17e59c90a5https://git.kernel.org/stable/c/5b0a1f1247cd42ac5e0d369f8dbb58762692edeehttps://git.kernel.org/stable/c/739a6a6bbdb793bd57938cb24aa5a6df89983546https://git.kernel.org/stable/c/86e1e080ad14c5fb6c14a5f0eb530b1b38cbc968https://git.kernel.org/stable/c/dcd4ba068b194c6ef0071491aa3f12bec8c14d5bhttps://git.kernel.org/stable/c/f02c1d8dc8d880cbaaf9094b4f396fe868ee23ffhttps://git.kernel.org/stable/c/f2ffb8653ea85ae39ce44347751fcc4c3e41f6bbhttps://git.kernel.org/stable/c/f4d70c139d313948e02360304a6cbcd3a4f5deb5
2025-10-07
Published