CVE-2022-50734
published 2025-12-24CVE-2022-50734: In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for…
PriorityP419medium5.3
EPSS
0.21%
11.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5.13.19 < 5.14 | 5.14 |
| linux | linux | >= 5.14.6 < 5.15 | 5.15 |
| linux | linux | >= de0534df93474f268486c486ea7e01b44a478026 < 9391cc3a787a58aa224a6440d7f244d780ba2896 | 9391cc3a787a58aa224a6440d7f244d780ba2896 |
| linux | linux | >= de0534df93474f268486c486ea7e01b44a478026 < 2bd2774df0ce37920b23819a860a66fdbdd90823 | 2bd2774df0ce37920b23819a860a66fdbdd90823 |
| linux | linux | >= de0534df93474f268486c486ea7e01b44a478026 < b6054b9b239a493672f853b034570cca93ba7a88 | b6054b9b239a493672f853b034570cca93ba7a88 |
| linux | linux | >= de0534df93474f268486c486ea7e01b44a478026 < bd1244561fa2a4531ded40dbf09c9599084f8b29 | bd1244561fa2a4531ded40dbf09c9599084f8b29 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 5.15.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.20.0 < 6.0.3 | 6.0.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.15.74/5.19.16/6.0.2 nvmem nvmem_register memory leak (Nessus ID 280013 / WID-SEC-2025-2929)
vuldb·2026-04-21
CVE-2022-50734 [CRITICAL] Linux Kernel up to 5.15.74/5.19.16/6.0.2 nvmem nvmem_register memory leak (Nessus ID 280013 / WID-SEC-2025-2929)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.15.74/5.19.16/6.0.2. Affected is the function nvmem_register of the component nvmem. The manipulation leads to memory leak.
This vulnerability is referenced as CVE-2022-50734. The attack needs to be initiated within the local network. No exploit is available.
It is suggested to upgrade the affected component.
OSV
CVE-2022-50734: In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nv
osv·2025-12-24
CVE-2022-50734 CVE-2022-50734: In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nv
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
OSV
nvmem: core: Fix memleak in nvmem_register()
osv·2025-12-24
CVE-2022-50734 nvmem: core: Fix memleak in nvmem_register()
nvmem: core: Fix memleak in nvmem_register()
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
GHSA
GHSA-p8g3-3wvp-3jxw: In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for
ghsa_unreviewed·2025-12-24
CVE-2022-50734 GHSA-p8g3-3wvp-3jxw: In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
Red Hat
kernel: nvmem: core: Fix memleak in nvmem_register()
vendor_redhat·2025-12-24
CVE-2022-50734 kernel: nvmem: core: Fix memleak in nvmem_register()
kernel: nvmem: core: Fix memleak in nvmem_register()
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enter
Debian
CVE-2022-50734: linux - In the Linux kernel, the following vulnerability has been resolved: nvmem: core...
vendor_debian·2022
CVE-2022-50734 CVE-2022-50734: linux - In the Linux kernel, the following vulnerability has been resolved: nvmem: core...
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50734 kernel: nvmem: core: Fix memleak in nvmem_register()
bugzilla·2025-12-24
CVE-2022-50734 CVE-2022-50734 kernel: nvmem: core: Fix memleak in nvmem_register()
CVE-2022-50734 kernel: nvmem: core: Fix memleak in nvmem_register()
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50734-96fa@gregkh/T
Wiz
CVE-2022-50734 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2022-50734 [MEDIUM] CVE-2022-50734 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50734 :
Linux Debian vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Debian
Linux Ubuntu
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.4
Ex
2025-12-24
Published