CVE-2022-50734

nvmem: core: Fix memleak in nvmem_register()

N/A

Published: December 24, 2025 at 12:22 PM UTC

Updated: June 17, 2026 at 05:24 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 5.13.19v ≥ 5.14.65.13.19 ≤ v < 5.145.14.6 ≤ v < 5.155.15 ≤ v < 5.15.755.15 ≤ v < 5.19.175.15 ≤ v < 6.0.35.15 ≤ v < 6.15.13.19 5.14.6 5.1563c2b13ba0428b8f477e4adb1d40a50eb4493c09c1d44b93ca9f3ebc26b0de0a7f4b7156702762b6de0534df93474f268486c486ea7e01b44a478026

Vendor states this is fixed in 2bd2774df0ce37920b23819a860a66fdbdd90823 (fixed)

Vendor states this is fixed in 9391cc3a787a58aa224a6440d7f244d780ba2896 (fixed)

Vendor states this is fixed in b6054b9b239a493672f853b034570cca93ba7a88 (fixed)

Vendor states this is fixed in bd1244561fa2a4531ded40dbf09c9599084f8b29 (fixed)

Affected range stops below 5.14, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 5.15.75 (unaffected)

Vendor states this is fixed in 5.19.17 (unaffected)

Vendor states this is fixed in 6.0.3 (unaffected)

Vendor states this is fixed in 6.1 (unaffected)