CVE-2022-50713 clk: visconti: Fix memory leak in visconti_register_pll()
A memory leak in the Linux kernel's Visconti clock driver can lead to resource exhaustion and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50713?
CVE-2022-50713 is a denial of service vulnerability in Linux, published on 24 Dec 2025.
Official description
In the Linux kernel, the following vulnerability has been resolved:
clk: visconti: Fix memory leak in visconti_register_pll()
@pll->rate_table has allocated memory by kmemdup(), if clk_hw_register() fails, it should be freed, otherwise it will cause memory leak issue, this patch fixes it.
Which versions are affected by CVE-2022-50713?
How do I fix CVE-2022-50713?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-50713 being exploited?
There is no known exploitation of CVE-2022-50713 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2022-50713, GHSA-rwvf-r7p6-mvvj, UBUNTU-CVE-2022-50713.