CVE-2022-50776 - Vulnerability Details

- clk: st: Fix memory leak in st_of_quadfs_setup()

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: st: Fix memory leak in st_of_quadfs_setup()

If st_clk_register_quadfs_pll() fails, @lock should be freed before goto
@err_exit, otherwise will cause meory leak issue, fix it.

Published: 2025-12-24

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< 081538ae5817631a2b99e8e75cce981060aab29f
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< f0295209de457049a4a5f3e3985528391bd1ab34
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< be03875007621fcee96e6f9fd7b9e59c8dfcf6fa
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< 713ad301c2d49e88fe586b57ebac8f220a98e162
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< efd025f32fce27a8ada9bcb4731e8a84476e5b3d
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< adf6a00859d014cecf046dc91f75c0e65a544360
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< 335ef7546c77e63154d6ea4d603b11274a85900e
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< f4731395d6db850127634197863aede188d8e9de
`5f7aa9071e935c8c0e869306c7ef073df6c409f6`	affected	< cfd3ffb36f0d566846163118651d868e607300ba

Linux

affected

Version	Status	Constraints
`3.15`	affected	—
`0`	unaffected	< 3.15
`4.9.337`	unaffected	≤ 4.9.*
`4.14.303`	unaffected	≤ 4.14.*
`4.19.270`	unaffected	≤ 4.19.*
`5.4.229`	unaffected	≤ 5.4.*
`5.10.163`	unaffected	≤ 5.10.*
`5.15.86`	unaffected	≤ 5.15.*
`6.0.16`	unaffected	≤ 6.0.*
`6.1.2`	unaffected	≤ 6.1.*
`6.2`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00064.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/081538ae5817631a2b99e8e75cce981060aab29f
https://git.kernel.org/stable/c/335ef7546c77e63154d6ea4d603b11274a85900e
https://git.kernel.org/stable/c/713ad301c2d49e88fe586b57ebac8f220a98e162
https://git.kernel.org/stable/c/adf6a00859d014cecf046dc91f75c0e65a544360
https://git.kernel.org/stable/c/be03875007621fcee96e6f9fd7b9e59c8dfcf6fa
https://git.kernel.org/stable/c/cfd3ffb36f0d566846163118651d868e607300ba
https://git.kernel.org/stable/c/efd025f32fce27a8ada9bcb4731e8a84476e5b3d
https://git.kernel.org/stable/c/f0295209de457049a4a5f3e3985528391bd1ab34
https://git.kernel.org/stable/c/f4731395d6db850127634197863aede188d8e9de
https://lore.kernel.org/linux-cve-announce/2025122400-CVE-2022-50776-f275@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50776
https://www.cve.org/CVERecord?id=CVE-2022-50776

History

Thu, 25 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025122400-CVE-2022-50776-f275@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50776 https://www.cve.org/CVERecord?id=CVE-2022-50776

Wed, 24 Dec 2025 13:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: clk: st: Fix memory leak in st_of_quadfs_setup() If st_clk_register_quadfs_pll() fails, @lock should be freed before goto @err_exit, otherwise will cause meory leak issue, fix it.
Title		clk: st: Fix memory leak in st_of_quadfs_setup()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/081538ae5817631a2b99e8e75cce981060aab29f https://git.kernel.org/stable/c/335ef7546c77e63154d6ea4d603b11274a85900e https://git.kernel.org/stable/c/713ad301c2d49e88fe586b57ebac8f220a98e162 https://git.kernel.org/stable/c/adf6a00859d014cecf046dc91f75c0e65a544360 https://git.kernel.org/stable/c/be03875007621fcee96e6f9fd7b9e59c8dfcf6fa https://git.kernel.org/stable/c/cfd3ffb36f0d566846163118651d868e607300ba https://git.kernel.org/stable/c/efd025f32fce27a8ada9bcb4731e8a84476e5b3d https://git.kernel.org/stable/c/f0295209de457049a4a5f3e3985528391bd1ab34 https://git.kernel.org/stable/c/f4731395d6db850127634197863aede188d8e9de

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-24T13:06:05.804Z

Updated: 2026-05-11T19:25:19.470Z

Reserved: 2025-12-24T13:02:21.547Z

Link: CVE-2022-50776

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-24T13:16:04.433

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50776

Redhat

Severity :

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2022-50776 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object