CVE-2022-50624
Published Dec 8, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsec_register_mdio() If phy_device_register() fails, phy_device_free() need be called to put refcount, so memory of phy device and device name can be freed in callback function. If get_phy_device() fails, mdiobus_unregister() need be called, or it will cause warning in mdiobus_free() and kobject is leaked.
Is your site exposed to CVE-2022-50624?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/1e0bee973ef6fc3c1e3acb014515eaea37c8fa17
https://git.kernel.org/stable/c/62f0a08e82a6312efd7df7f595c0b11d4ffde610
https://git.kernel.org/stable/c/728884b22d83148a330b23f9472f1e118b589211
https://git.kernel.org/stable/c/846e677daf51220d7975c61a20e440a88473951e
https://git.kernel.org/stable/c/94423589689124e8cd145b38a1034be7f25835b2
https://git.kernel.org/stable/c/fda2d07234a21be4d71ebfe97a45f499726902d6
Frequently Asked Questions
What is CVE-2022-50624? +
In the Linux kernel, the following vulnerability has been resolved:
net: netsec: fix error handling in netsec_register_mdio()
If phy_device_register() fails, phy_device_free() need be called to
put refcount, so memory of phy device and device name can be freed
in callback function.
If get_phy_device() fails, mdiobus_unregister() need be called,
or it will cause warning in mdiobus_free() and kobject is leaked.
How do I check if I'm vulnerable to CVE-2022-50624? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.