CVE-2022-50104

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50104
In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xive_get_max_prio of_find_node_by_path() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/255b650cbec6849443ce2e0cdd187fd5e61c218c Patch
https://git.kernel.org/stable/c/2e18b869a8d574cfe9ee64df9c3d0a7ac7ed07a8 Patch
https://git.kernel.org/stable/c/5ed9709d262bf026b2ff64979fbfe0f496287588 Patch
https://git.kernel.org/stable/c/6d1e53f7f181a11a8a343def1e0d0209905b7c64 Patch
https://git.kernel.org/stable/c/79b8eae24b7ee157bda07695d802be8576983fa8 Patch
https://git.kernel.org/stable/c/d99733ad47a6c990b52e136608455643bfa708f2 Patch
https://git.kernel.org/stable/c/ea494e8a9852abd0ba60f69b254ce0d7c38449e2 Patch
https://git.kernel.org/stable/c/f658d5b528ce97a68efbb64ee54f6fe0909b189a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 13:29

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/255b650cbec6849443ce2e0cdd187fd5e61c218c - () https://git.kernel.org/stable/c/255b650cbec6849443ce2e0cdd187fd5e61c218c - Patch
References () https://git.kernel.org/stable/c/2e18b869a8d574cfe9ee64df9c3d0a7ac7ed07a8 - () https://git.kernel.org/stable/c/2e18b869a8d574cfe9ee64df9c3d0a7ac7ed07a8 - Patch
References () https://git.kernel.org/stable/c/5ed9709d262bf026b2ff64979fbfe0f496287588 - () https://git.kernel.org/stable/c/5ed9709d262bf026b2ff64979fbfe0f496287588 - Patch
References () https://git.kernel.org/stable/c/6d1e53f7f181a11a8a343def1e0d0209905b7c64 - () https://git.kernel.org/stable/c/6d1e53f7f181a11a8a343def1e0d0209905b7c64 - Patch
References () https://git.kernel.org/stable/c/79b8eae24b7ee157bda07695d802be8576983fa8 - () https://git.kernel.org/stable/c/79b8eae24b7ee157bda07695d802be8576983fa8 - Patch
References () https://git.kernel.org/stable/c/d99733ad47a6c990b52e136608455643bfa708f2 - () https://git.kernel.org/stable/c/d99733ad47a6c990b52e136608455643bfa708f2 - Patch
References () https://git.kernel.org/stable/c/ea494e8a9852abd0ba60f69b254ce0d7c38449e2 - () https://git.kernel.org/stable/c/ea494e8a9852abd0ba60f69b254ce0d7c38449e2 - Patch
References () https://git.kernel.org/stable/c/f658d5b528ce97a68efbb64ee54f6fe0909b189a - () https://git.kernel.org/stable/c/f658d5b528ce97a68efbb64ee54f6fe0909b189a - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/xive: Se corrige la fuga de recuento de referencias en xive_get_max_prio. of_find_node_by_path() devuelve un puntero de nodo con el recuento de referencias incrementado; al finalizar, se debe usar of_node_put(). Se ha añadido la función of_node_put() que falta para evitar la fuga de recuento de referencias.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 13:29

NVD link : CVE-2022-50104

Mitre link : CVE-2022-50104

CVE.ORG link : CVE-2022-50104

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other