CVE-2022-50109

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50109
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: amba-clcd: Fix refcount leak bugs In clcdfb_of_init_display(), we should call of_node_put() for the references returned by of_graph_get_next_endpoint() and of_graph_get_remote_port_parent() which have increased the refcount. Besides, we should call of_node_put() both in fail path or when the references are not used anymore.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883 Patch
https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69 Patch
https://git.kernel.org/stable/c/29f06f1905c312671a09ee85ca92ac04a1d9f305 Patch
https://git.kernel.org/stable/c/49a4c1a87ef884e43cdda58b142a2a30f2f09efc Patch
https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032 Patch
https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c Patch
https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df Patch
https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 13:29

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883 - () https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883 - Patch
References () https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69 - () https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69 - Patch
References () https://git.kernel.org/stable/c/29f06f1905c312671a09ee85ca92ac04a1d9f305 - () https://git.kernel.org/stable/c/29f06f1905c312671a09ee85ca92ac04a1d9f305 - Patch
References () https://git.kernel.org/stable/c/49a4c1a87ef884e43cdda58b142a2a30f2f09efc - () https://git.kernel.org/stable/c/49a4c1a87ef884e43cdda58b142a2a30f2f09efc - Patch
References () https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032 - () https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032 - Patch
References () https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c - () https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c - Patch
References () https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df - () https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df - Patch
References () https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7 - () https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: video: fbdev: amba-clcd: Corrección de errores de fuga de recuento de referencias. En clcdfb_of_init_display(), debemos llamar a of_node_put() para las referencias devueltas por of_graph_get_next_endpoint() y of_graph_get_remote_port_parent() que han aumentado el recuento de referencias. Además, debemos llamar a of_node_put() tanto en la ruta de error como cuando las referencias ya no se utilizan.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 13:29

NVD link : CVE-2022-50109

Mitre link : CVE-2022-50109

CVE.ORG link : CVE-2022-50109

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other