PT-2025-49465 · Linux · Linux Kernel

CVE-2022-50624

·

Published

2022-10-19

·

Updated

2025-12-08

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Linux kernel related to error handling within the netsec register mdio() function. Specifically, if phy device register() fails, the phy device free() function is not called, potentially leading to memory leaks of the phy device and its associated name in callback functions. Additionally, if get phy device() fails, mdiobus unregister() is not called, resulting in a warning during mdiobus free() and a kobject leak.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10366
CVE-2022-50624

Affected Products

Linux Kernel