CVE-2022-50658
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-06-16
AI Q&A
2025-12-09
EPSS Evaluated
2026-06-15
NVD
CVE-2022-50658
EUVD
EUVD-2022-55747
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
qcom linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a memory leak in the Linux kernel's cpufreq driver for Qualcomm hardware. Specifically, if the speedbin length is incorrect, the error handling code fails to free the allocated speedbin buffer, causing a memory leak. The fix ensures that the speedbin buffer is always freed in the error path.

Impact Analysis

The memory leak could lead to increased memory usage and potentially degrade system performance or stability over time if the error condition occurs repeatedly. However, it does not directly indicate other impacts such as code execution or data exposure.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version that includes the fix for the cpufreq: qcom memory leak in the error path. This ensures that the speedbin buffer is properly freed and prevents the memory leak.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-50658. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart