CVE-2022-50152

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50152
In the Linux kernel, the following vulnerability has been resolved: usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/302970b4cad3ebfda2c05ce06c322ccdc447d17e Patch
https://git.kernel.org/stable/c/4db00c2fa6f8c9876a7e20511dccf43b50be9006 Patch
https://git.kernel.org/stable/c/50238c4b54c2ac6c2da7a84a4a2b0a570e3da0e2 Patch
https://git.kernel.org/stable/c/59026d5cc615da28e0c9806a71bf07065c906464 Patch
https://git.kernel.org/stable/c/591ab8dbf6c21927f23f83ddb90691f48b86d136 Patch
https://git.kernel.org/stable/c/65d36ec409b635dfc2f95f0d7c5877c9d0cb7630 Patch
https://git.kernel.org/stable/c/a0fbac3bf26a11f084233519ddf3fd5e5bb28939 Patch
https://git.kernel.org/stable/c/d35903e9650f4fa79426ce390db8678dbf5ac432 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

20 Nov 2025, 21:31

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: ohci-nxp: Se corrige la fuga de recuento de referencias en ohci_hcd_nxp_probe. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha añadido la función of_node_put() que falta para evitar la fuga de recuento de referencias.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/302970b4cad3ebfda2c05ce06c322ccdc447d17e - () https://git.kernel.org/stable/c/302970b4cad3ebfda2c05ce06c322ccdc447d17e - Patch
References () https://git.kernel.org/stable/c/4db00c2fa6f8c9876a7e20511dccf43b50be9006 - () https://git.kernel.org/stable/c/4db00c2fa6f8c9876a7e20511dccf43b50be9006 - Patch
References () https://git.kernel.org/stable/c/50238c4b54c2ac6c2da7a84a4a2b0a570e3da0e2 - () https://git.kernel.org/stable/c/50238c4b54c2ac6c2da7a84a4a2b0a570e3da0e2 - Patch
References () https://git.kernel.org/stable/c/59026d5cc615da28e0c9806a71bf07065c906464 - () https://git.kernel.org/stable/c/59026d5cc615da28e0c9806a71bf07065c906464 - Patch
References () https://git.kernel.org/stable/c/591ab8dbf6c21927f23f83ddb90691f48b86d136 - () https://git.kernel.org/stable/c/591ab8dbf6c21927f23f83ddb90691f48b86d136 - Patch
References () https://git.kernel.org/stable/c/65d36ec409b635dfc2f95f0d7c5877c9d0cb7630 - () https://git.kernel.org/stable/c/65d36ec409b635dfc2f95f0d7c5877c9d0cb7630 - Patch
References () https://git.kernel.org/stable/c/a0fbac3bf26a11f084233519ddf3fd5e5bb28939 - () https://git.kernel.org/stable/c/a0fbac3bf26a11f084233519ddf3fd5e5bb28939 - Patch
References () https://git.kernel.org/stable/c/d35903e9650f4fa79426ce390db8678dbf5ac432 - () https://git.kernel.org/stable/c/d35903e9650f4fa79426ce390db8678dbf5ac432 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-20 21:31

NVD link : CVE-2022-50152

Mitre link : CVE-2022-50152

CVE.ORG link : CVE-2022-50152

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other