CVE-2022-50141

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50141
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() checks null pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933 Patch
https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a Patch
https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc Patch
https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a Patch
https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820 Patch
https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a Patch
https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a Patch
https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 02:55

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933 - () https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933 - Patch
References () https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a - () https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a - Patch
References () https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc - () https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc - Patch
References () https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a - () https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a - Patch
References () https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820 - () https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820 - Patch
References () https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a - () https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a - Patch
References () https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a - () https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a - Patch
References () https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45 - () https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45 - Patch
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mmc: sdhci-of-esdhc: Se corrige la fuga de recuento de referencias en esdhc_signal_voltage_switch. of_find_matching_node() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha añadido la función of_node_put() que falta para evitar la fuga de recuento de referencias. of_node_put() comprueba el puntero nulo.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 02:55

NVD link : CVE-2022-50141

Mitre link : CVE-2022-50141

CVE.ORG link : CVE-2022-50141

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other