CVE-2022-50872 - Vulnerability Details

- ARM: OMAP2+: Fix memory leak in realtime_counter_init()

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: OMAP2+: Fix memory leak in realtime_counter_init()

The "sys_clk" resource is malloced by clk_get(),
it is not released when the function return.

Published: 2025-12-30

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 5f9aedabce3404dd8bb769822fc11317c55fbdc1
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< e3a6af3059e4f83d1a986a3180eb1e04f99c9e64
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 8041f9a2a958277f95926560dc85910aecd48c0b
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 4862c41d5f3bee1ec64c979c82bd8cfe96b78f7d
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 10fcdad2b9f3f424873714eb8713a3e6f7ab84bb
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 98df4bdf3b010c23cc3c542d0c303016e5fceb40
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< 4f7ad1b08533247c4bf29217ba499ea4138cc2c1
`fa6d79d27614223d82418023b7f5300f1a1530d3`	affected	< ed8167cbf65c2b6ff6faeb0f96ded4d6d581e1ac

Linux

affected

Version	Status	Constraints
`3.7`	affected	—
`0`	unaffected	< 3.7
`4.14.308`	unaffected	≤ 4.14.*
`4.19.276`	unaffected	≤ 4.19.*
`5.4.235`	unaffected	≤ 5.4.*
`5.10.173`	unaffected	≤ 5.10.*
`5.15.99`	unaffected	≤ 5.15.*
`6.1.16`	unaffected	≤ 6.1.*
`6.2.3`	unaffected	≤ 6.2.*
`6.3`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/10fcdad2b9f3f424873714eb8713a3e6f7ab84bb
https://git.kernel.org/stable/c/4862c41d5f3bee1ec64c979c82bd8cfe96b78f7d
https://git.kernel.org/stable/c/4f7ad1b08533247c4bf29217ba499ea4138cc2c1
https://git.kernel.org/stable/c/5f9aedabce3404dd8bb769822fc11317c55fbdc1
https://git.kernel.org/stable/c/8041f9a2a958277f95926560dc85910aecd48c0b
https://git.kernel.org/stable/c/98df4bdf3b010c23cc3c542d0c303016e5fceb40
https://git.kernel.org/stable/c/e3a6af3059e4f83d1a986a3180eb1e04f99c9e64
https://git.kernel.org/stable/c/ed8167cbf65c2b6ff6faeb0f96ded4d6d581e1ac
https://lore.kernel.org/linux-cve-announce/2025123051-CVE-2022-50872-0110@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50872
https://www.cve.org/CVERecord?id=CVE-2022-50872

History

Thu, 01 Jan 2026 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123051-CVE-2022-50872-0110@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50872 https://www.cve.org/CVERecord?id=CVE-2022-50872
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix memory leak in realtime_counter_init() The "sys_clk" resource is malloced by clk_get(), it is not released when the function return.
Title		ARM: OMAP2+: Fix memory leak in realtime_counter_init()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/10fcdad2b9f3f424873714eb8713a3e6f7ab84bb https://git.kernel.org/stable/c/4862c41d5f3bee1ec64c979c82bd8cfe96b78f7d https://git.kernel.org/stable/c/4f7ad1b08533247c4bf29217ba499ea4138cc2c1 https://git.kernel.org/stable/c/5f9aedabce3404dd8bb769822fc11317c55fbdc1 https://git.kernel.org/stable/c/8041f9a2a958277f95926560dc85910aecd48c0b https://git.kernel.org/stable/c/98df4bdf3b010c23cc3c542d0c303016e5fceb40 https://git.kernel.org/stable/c/e3a6af3059e4f83d1a986a3180eb1e04f99c9e64 https://git.kernel.org/stable/c/ed8167cbf65c2b6ff6faeb0f96ded4d6d581e1ac

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:15:42.035Z

Updated: 2026-05-11T19:26:45.434Z

Reserved: 2025-12-30T12:06:07.136Z

Link: CVE-2022-50872

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:02.140

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50872

Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2022-50872 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object