In the Linux kernel, the following vulnerability has been resolved:

nvmem: core: Fix memleak in nvmem_register()

dev_set_name will alloc memory for nvmem->dev.kobj.name in
nvmem_register, when nvmem_validate_keepouts failed, nvmem's
memory will be freed and return, but nobody will free memory
for nvmem->dev.kobj.name, there will be memleak, so moving
nvmem_validate_keepouts() after device_register() and let
the device core deal with cleaning name in error cases.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
de0534df93474f268486c486ea7e01b44a478026 affected < 9391cc3a787a58aa224a6440d7f244d780ba2896
de0534df93474f268486c486ea7e01b44a478026 affected < 2bd2774df0ce37920b23819a860a66fdbdd90823
de0534df93474f268486c486ea7e01b44a478026 affected < b6054b9b239a493672f853b034570cca93ba7a88
de0534df93474f268486c486ea7e01b44a478026 affected < bd1244561fa2a4531ded40dbf09c9599084f8b29
c1d44b93ca9f3ebc26b0de0a7f4b7156702762b6 affected —
63c2b13ba0428b8f477e4adb1d40a50eb4493c09 affected —
Linux Linux affected
Version Status Constraints
5.15 affected —
0 unaffected < 5.15
5.15.75 unaffected ≤ 5.15.*
5.19.17 unaffected ≤ 5.19.*
6.0.3 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2bd2774df0ce37920b23819a860a66fdbdd90823 cve-icon cve-icon
https://git.kernel.org/stable/c/9391cc3a787a58aa224a6440d7f244d780ba2896 cve-icon cve-icon
https://git.kernel.org/stable/c/b6054b9b239a493672f853b034570cca93ba7a88 cve-icon cve-icon
https://git.kernel.org/stable/c/bd1244561fa2a4531ded40dbf09c9599084f8b29 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025122421-CVE-2022-50734-96fa@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50734 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50734 cve-icon
History

Thu, 25 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References

Wed, 24 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
Title nvmem: core: Fix memleak in nvmem_register()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-24T12:22:53.333Z

Reserved: 2025-12-24T12:20:40.331Z

Link: CVE-2022-50734

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-24T13:16:00.080

Modified: 2025-12-29T15:58:34.503

Link: CVE-2022-50734

cve-icon Redhat

Severity :

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2022-50734 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.