CVE-2022-50523: clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
In the Linux kernel, the following vulnerability has been resolved:
clk: rockchip: Fix memory leak in rockchipclkregisterpll()
If clkregister() fails, @pll->ratetable may have allocated memory by kmemdup(), so it needs to be freed, otherwise will cause memory leak issue, this patch fixes it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What conditions are required to trigger the memory leak?
The leak occurs when rockchip_clk_register_pll() has allocated pll->rate_table using kmemdup() and a subsequent clk_register() call fails. Exploitation requires local access with low privileges; no user interaction is required.
What is the practical impact?
The reported impact is availability loss from a memory leak. The supplied CVSS vector indicates no confidentiality or integrity impact.
What should administrators do?
Apply an available patch from the referenced stable Linux kernel commits. No temporary mitigation is provided in the available information.