What’s Vulnerable › Vulnerabilities

CVE-2022-50658: cpufreq: qcom: fix memory leak in error path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always free the speedbin buffer.

Affected products

• Linux kernel: 5.7 — fixed in 6.1

How to fix

Upgrade to a fixed version: Linux kernel 6.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/9f42cf54403a42cb092636804d2628d8ecf71e75
• https://git.kernel.org/stable/c/b5606e3ab1f7cc00d89903f4a11fe57747bb3a68
• https://git.kernel.org/stable/c/b6ea267e0c6bdf5463358e2a2e5280cfa6cacc48
• https://git.kernel.org/stable/c/e55feb31df3fc78b880d6e9d4b5853f05c974833

Get alerted when CVE-2022-50658 or the next vulnerability affects your stack