CVE-2022-50105

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50105
In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader of_find_node_by_path() returns remote device nodepointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0aa5de2547b7ccf0a31bc740d12f829fae243112 Patch
https://git.kernel.org/stable/c/14329d29a048dc35aac2374fb3d588d8190095a2 Patch
https://git.kernel.org/stable/c/4288eb035ba4ddb53245e9365c919bb51ac00c2c Patch
https://git.kernel.org/stable/c/43584490ee6c8a104797444af6bf89d0dafe95c0 Patch
https://git.kernel.org/stable/c/69e9fa07b229badab808980e984a9fe824116f00 Patch
https://git.kernel.org/stable/c/6ac059dacffa8ab2f7798f20e4bd3333890c541c Patch
https://git.kernel.org/stable/c/85aff6a9b7b7ec4e5c319f7946c9864c8d5e3d4a Patch
https://git.kernel.org/stable/c/d0cb99948c5f6d8fe56f6e69b8dd0a05ee5f9cec Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 13:29

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/spufs: Se corrige la fuga de recuento de referencias en spufs_init_isolated_loader. La función `of_find_node_by_path()` devuelve el puntero de nodo del dispositivo remoto con el recuento de referencias incrementado. Al finalizar, se debe usar `of_node_put()`. Se ha añadido la función `of_node_put()` que falta para evitar la fuga de recuento de referencias.
References () https://git.kernel.org/stable/c/0aa5de2547b7ccf0a31bc740d12f829fae243112 - () https://git.kernel.org/stable/c/0aa5de2547b7ccf0a31bc740d12f829fae243112 - Patch
References () https://git.kernel.org/stable/c/14329d29a048dc35aac2374fb3d588d8190095a2 - () https://git.kernel.org/stable/c/14329d29a048dc35aac2374fb3d588d8190095a2 - Patch
References () https://git.kernel.org/stable/c/4288eb035ba4ddb53245e9365c919bb51ac00c2c - () https://git.kernel.org/stable/c/4288eb035ba4ddb53245e9365c919bb51ac00c2c - Patch
References () https://git.kernel.org/stable/c/43584490ee6c8a104797444af6bf89d0dafe95c0 - () https://git.kernel.org/stable/c/43584490ee6c8a104797444af6bf89d0dafe95c0 - Patch
References () https://git.kernel.org/stable/c/69e9fa07b229badab808980e984a9fe824116f00 - () https://git.kernel.org/stable/c/69e9fa07b229badab808980e984a9fe824116f00 - Patch
References () https://git.kernel.org/stable/c/6ac059dacffa8ab2f7798f20e4bd3333890c541c - () https://git.kernel.org/stable/c/6ac059dacffa8ab2f7798f20e4bd3333890c541c - Patch
References () https://git.kernel.org/stable/c/85aff6a9b7b7ec4e5c319f7946c9864c8d5e3d4a - () https://git.kernel.org/stable/c/85aff6a9b7b7ec4e5c319f7946c9864c8d5e3d4a - Patch
References () https://git.kernel.org/stable/c/d0cb99948c5f6d8fe56f6e69b8dd0a05ee5f9cec - () https://git.kernel.org/stable/c/d0cb99948c5f6d8fe56f6e69b8dd0a05ee5f9cec - Patch
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 13:29

NVD link : CVE-2022-50105

Mitre link : CVE-2022-50105

CVE.ORG link : CVE-2022-50105

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other