CVE-2022-50139

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50139
In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() We should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a Patch
https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c Patch
https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf Patch
https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a Patch
https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 02:57

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a - () https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a - Patch
References () https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c - () https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c - Patch
References () https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf - () https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf - Patch
References () https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a - () https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a - Patch
References () https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213 - () https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: aspeed-vhub: se corrige el error de pérdida de recuento de referencias en ast_vhub_init_desc() Deberíamos llamar a of_node_put() para la referencia devuelta por of_get_child_by_name() que ha aumentado el recuento de referencias.
First Time Linux
Linux linux Kernel

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 02:57

NVD link : CVE-2022-50139

Mitre link : CVE-2022-50139

CVE.ORG link : CVE-2022-50139

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other