CVE-2022-50547 — Missing Release of Memory after Effective Lifetime in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 91.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 7
Latest updateApr 20
Description
In the Linux kernel, the following vulnerability has been resolved:
media: solo6x10: fix possible memory leak in solo_sysfs_init()
If device_register() returns error in solo_sysfs_init(), the
name allocated by dev_set_name() need be freed. As comment of
device_register() says, it should use put_device() to give up
the reference in the error path. So fix this by calling
put_device(), then the name can be freed in kobject_cleanup().
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linuxdcae5dacbce518513abf7776cb450b7bd95d722b — 83d4b1ae98a47a739fa5241300b86eb1110d5d63+9
Patches
🔴Vulnerability Details
3VulDB▶
Linux Kernel up to 6.1.1 solo_sysfs_init memory leak (EUVD-2025-32012 / WID-SEC-2025-2229)↗2026-04-20
OSV▶
CVE-2022-50547: In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solo_sysfs_init() If device_register(↗2025-10-07
GHSA▶
GHSA-65wq-6hc9-fgcm: In the Linux kernel, the following vulnerability has been resolved:
media: solo6x10: fix possible memory leak in solo_sysfs_init()
If device_registe↗2025-10-07