{"cve":"CVE-2022-50724","nvd":{"published":"2025-12-24T13:15:59.057","modified":"2026-06-17T05:24:04.190","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: fix resource leak in regulator_register()\n\nI got some resource leak reports while doing fault injection test:\n\n  OF: ERROR: memory leak, expected refcount 1 instead of 100,\n  of_node_get()/of_node_put() unbalanced - destroy cset entry:\n  attach overlay node /i2c/pmic@64/regulators/buck1\n\nunreferenced object 0xffff88810deea000 (size 512):\n  comm \"490-i2c-rt5190a\", pid 253, jiffies 4294859840 (age 5061.046s)\n  hex dump (first 32 bytes):\n    00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00  .....N..........\n    ff ff ff ff ff ff ff ff a0 1e 00 a1 ff ff ff ff  ................\n  backtrace:\n    [<00000000d78541e2>] kmalloc_trace+0x21/0x110\n    [<00000000b343d153>] device_private_init+0x32/0xd0\n    [<00000000be1f0c70>] device_add+0xb2d/0x1030\n    [<00000000e3e6344d>] regulator_register+0xaf2/0x12a0\n    [<00000000e2f5e754>] devm_regulator_register+0x57/0xb0\n    [<000000008b898197>] rt5190a_probe+0x52a/0x861 [rt5190a_regulator]\n\nunreferenced object 0xffff88810b617b80 (size 32):\n  comm \"490-i2c-rt5190a\", pid 253, jiffies 4294859904 (age 5060.983s)\n  hex dump (first 32 bytes):\n    72 65 67 75 6c 61 74 6f 72 2e 32 38 36 38 2d 53  regulator.2868-S\n    55 50 50 4c 59 00 ff ff 29 00 00 00 2b 00 00 00  UPPLY...)...+...\n  backtrace:\n    [<000000009da9280d>] __kmalloc_node_track_caller+0x44/0x1b0\n    [<0000000025c6a4e5>] kstrdup+0x3a/0x70\n    [<00000000790efb69>] create_regulator+0xc0/0x4e0\n    [<0000000005ed203a>] regulator_resolve_supply+0x2d4/0x440\n    [<0000000045796214>] regulator_register+0x10b3/0x12a0\n    [<00000000e2f5e754>] devm_regulator_register+0x57/0xb0\n    [<000000008b898197>] rt5190a_probe+0x52a/0x861 [rt5190a_regulator]\n\nAfter calling regulator_resolve_supply(), the 'rdev->supply' is set\nby set_supply(), after this set, in the error path, the resources\nneed be released, so call regulator_put() to avoid the leaks.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/35593d60b1622834984c43add7646d4069671aa9","https://git.kernel.org/stable/c/6a03c31d08f95dca9633a552de167b9e625833a8","https://git.kernel.org/stable/c/90b713aadc1240bf2dd03d610d6c1d016a9123a2","https://git.kernel.org/stable/c/ba62319a42c50e6254e98b3f316464fac8e77968","https://git.kernel.org/stable/c/c4c64d8abd656b9807b63178750fa91454602b86"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:17:07.138532058+00:00"},"epss":{"cve":"CVE-2022-50724","score":0.00263,"percentile":0.18162,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}