CVE-2022-50449

clk: samsung: Fix memory leak in _samsung_clk_register_pll()

MEDIUM
5.5
CVSS Score
Published: October 1, 2025 at 11:45 AM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix memory leak in _samsung_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, otherwise will cause memory leak issue, this patch fixes it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.12 ≤ v < 4.14.3033.12 ≤ v < 4.19.2703.12 ≤ v < 5.10.1633.12 ≤ v < 5.15.863.12 ≤ v < 5.4.2293.12 ≤ v < 6.0.163.12 ≤ v < 6.1.23.12 ≤ v < 6.24.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.865.16 ≤ v < 6.0.165.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.23.123ff6e0d8d64d594a551b5c4904e4b617bf7eee22
Vendor states this is fixed in 2e8dc0626fe86ae08914478dec1419618c557bc0 (fixed)
Vendor states this is fixed in 4887ec922e407b4feaf060c7b099482a5c52dee3 (fixed)
Vendor states this is fixed in 4e501a31af8efa593a2f003637b56d00b75dca23 (fixed)
Vendor states this is fixed in 5174e5b0d1b669a489524192b6adcbb3c54ebc72 (fixed)
Vendor states this is fixed in 7b738276a596fa101d320591e9fa84ea0fc3f713 (fixed)
Vendor states this is fixed in a00b4e0fa27317957536abf8f5d6a96d6cb9d9be (fixed)
Vendor states this is fixed in a35323218ff32782d051d2643912311a22e07b6a (fixed)
Vendor states this is fixed in da13355bb9961316d124f94dfc7a1385d0fb035a (fixed)
Vendor states this is fixed in 3.12 (unaffected)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card