UnratedFix available
nvmem: core: Fix memleak in nvmem_register()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.15.75, 5.19.17, 6.0.3
- CVEs
- CVE-2022-50734
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 08:56 UTC · Revision 1
Source evidence
nvmem: core: Fix memleak in nvmem_register()
core-osv · Original sourcePublished 24 Dec 2025, 12:22 UTC
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
osv:CVE-2022-50734
Kernel
Fixed versions: 5.15.75, 5.19.17, 6.0.3
Complete source record
{
"id": "ced1e64e77795677b4a605d3eeb653a33236142c73c58c7ace011ba10a3e26ed",
"url": "https://osv.dev/vulnerability/CVE-2022-50734",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "nvmem: core: Fix memleak in nvmem_register()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmem_register() dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.",
"evidence": "osv:CVE-2022-50734",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.15.75",
"evidence": "/affected/1/ranges"
},
{
"value": "5.19.17",
"evidence": "/affected/1/ranges"
},
{
"value": "6.0.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-50734",
"aliases": [
"CVE-2022-50734"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "de0534df93474f268486c486ea7e01b44a478026"
},
{
"fixed": "9391cc3a787a58aa224a6440d7f244d780ba2896"
},
{
"fixed": "2bd2774df0ce37920b23819a860a66fdbdd90823"
},
{
"fixed": "b6054b9b239a493672f853b034570cca93ba7a88"
},
{
"fixed": "bd1244561fa2a4531ded40dbf09c9599084f8b29"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.13.19"
},
{
"fixed": "5.14"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.14.6"
},
{
"fixed": "5.15"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c1d44b93ca9f3ebc26b0de0a7f4b7156702762b6"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "63c2b13ba0428b8f477e4adb1d40a50eb4493c09"
}
]
}
],
"versions": [
"v5.13.19",
"v5.14.21",
"v5.14.20",
"v5.14.19",
"v5.14.18",
"v5.14.17",
"v5.14.16",
"v5.14.15",
"v5.14.14",
"v5.14.13",
"v5.14.12",
"v5.14.11",
"v5.14.10",
"v5.14.9",
"v5.14.8",
"v5.14.7",
"v5.14.6"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50734.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.15.0"
},
{
"fixed": "5.15.75"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.19.17"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.20.0"
},
{
"fixed": "6.0.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50734.json"
}
}
],
"modified": "2026-10-08T02:47:50.684486578Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/2bd2774df0ce37920b23819a860a66fdbdd90823",
"https://git.kernel.org/stable/c/9391cc3a787a58aa224a6440d7f244d780ba2896",
"https://git.kernel.org/stable/c/b6054b9b239a493672f853b034570cca93ba7a88",
"https://git.kernel.org/stable/c/bd1244561fa2a4531ded40dbf09c9599084f8b29",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50734.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50734",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50734.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50734",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 98240,
"published_at": "2025-12-24T12:22:53.333+00:00"
}