CVE-2022-50547: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50547 is a vulnerability in the Linux kernel affecting the media subsystem, specifically the solo6x10 driver. The vulnerability was published on October 7, 2025, and involves a potential memory leak in the solo_sysfs_init() function (NVD).

The vulnerability occurs when device_register() returns an error in solo_sysfs_init(), where the name allocated by dev_set_name() needs to be freed. According to the documentation, put_device() should be used to give up the reference in the error path, allowing the name to be freed in kobject_cleanup() (RedHat).

The vulnerability results in a memory leak condition in the Linux kernel's solo6x10 driver, which could potentially lead to system resource exhaustion over time (Ubuntu).

The issue has been fixed in various Linux distributions. Ubuntu has released patches for multiple versions including fixes for linux-hwe (5.15.0-69.76~20.04.1), linux-azure (5.15.0-1035.42), and other kernel variants. Red Hat has evaluated the vulnerability and marked several versions of Red Hat Enterprise Linux as not affected (Ubuntu, RedHat).