In the Linux kernel, the following vulnerability has been resolved:

net: netsec: fix error handling in netsec_register_mdio()

If phy_device_register() fails, phy_device_free() need be called to
put refcount, so memory of phy device and device name can be freed
in callback function.

If get_phy_device() fails, mdiobus_unregister() need be called,
or it will cause warning in mdiobus_free() and kobject is leaked.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
533dd11a12f698c571a12271b20f235792d3e148 affected < 728884b22d83148a330b23f9472f1e118b589211
533dd11a12f698c571a12271b20f235792d3e148 affected < fda2d07234a21be4d71ebfe97a45f499726902d6
533dd11a12f698c571a12271b20f235792d3e148 affected < 62f0a08e82a6312efd7df7f595c0b11d4ffde610
533dd11a12f698c571a12271b20f235792d3e148 affected < 1e0bee973ef6fc3c1e3acb014515eaea37c8fa17
533dd11a12f698c571a12271b20f235792d3e148 affected < 846e677daf51220d7975c61a20e440a88473951e
533dd11a12f698c571a12271b20f235792d3e148 affected < 94423589689124e8cd145b38a1034be7f25835b2
Linux Linux affected
Version Status Constraints
4.16 affected —
0 unaffected < 4.16
4.19.264 unaffected ≤ 4.19.*
5.4.223 unaffected ≤ 5.4.*
5.10.153 unaffected ≤ 5.10.*
5.15.77 unaffected ≤ 5.15.*
6.0.7 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1e0bee973ef6fc3c1e3acb014515eaea37c8fa17 cve-icon cve-icon
https://git.kernel.org/stable/c/62f0a08e82a6312efd7df7f595c0b11d4ffde610 cve-icon cve-icon
https://git.kernel.org/stable/c/728884b22d83148a330b23f9472f1e118b589211 cve-icon cve-icon
https://git.kernel.org/stable/c/846e677daf51220d7975c61a20e440a88473951e cve-icon cve-icon
https://git.kernel.org/stable/c/94423589689124e8cd145b38a1034be7f25835b2 cve-icon cve-icon
https://git.kernel.org/stable/c/fda2d07234a21be4d71ebfe97a45f499726902d6 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025120853-CVE-2022-50624-0011@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50624 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50624 cve-icon
History

Tue, 09 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 08 Dec 2025 02:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsec_register_mdio() If phy_device_register() fails, phy_device_free() need be called to put refcount, so memory of phy device and device name can be freed in callback function. If get_phy_device() fails, mdiobus_unregister() need be called, or it will cause warning in mdiobus_free() and kobject is leaked.
Title net: netsec: fix error handling in netsec_register_mdio()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-08T01:16:38.357Z

Reserved: 2025-12-08T01:14:55.190Z

Link: CVE-2022-50624

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-08T02:15:48.377

Modified: 2025-12-08T18:26:19.900

Link: CVE-2022-50624

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-08T00:00:00Z

Links: CVE-2022-50624 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.