What’s Vulnerable › Vulnerabilities

CVE-2022-50836: remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() The kfree() should be called when of_irq_get_byname() fails or devm_request_threaded_irq() fails in qcom_add_sysmon_subdev(), otherwise there will be a memory leak, so add kfree() to fix it.

Affected products

• Linux kernel: 5.1 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/131c0a3ead78d45f0f39ddb42cf1bd9be26239b0
• https://git.kernel.org/stable/c/1a62bebe0705556d37cfa8409ddc759b11d404f6
• https://git.kernel.org/stable/c/27441fab2651cd909d8a5440ca079bc50245f427
• https://git.kernel.org/stable/c/e01ce676aaef3b13d02343d7e70f9637d93a3367
• https://git.kernel.org/stable/c/e4539eb5c0c342567183fe386d0699c8dab49490
• https://git.kernel.org/stable/c/ec97e9a5c2f25d2f9f9d7005e9ac67f23cc751cd

Get alerted when CVE-2022-50836 or the next vulnerability affects your stack