CVE-2022-50160

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50160
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in ap_flash_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/77087a04c8fd554134bddcb8a9ff87b21f357926 Patch
https://git.kernel.org/stable/c/80b1465b2ae81ebb59bbe62bcb7a7f7d4e9ece6f Patch
https://git.kernel.org/stable/c/941ef6997f9db704fe4fd62fc01e420fdd5048b2 Patch
https://git.kernel.org/stable/c/995fb2874bb5696357846a91e59181c600e6aac8 Patch
https://git.kernel.org/stable/c/a74322d4b897ddc268b340c4a397f6066c2f945d Patch
https://git.kernel.org/stable/c/babd7b0124650ab71a6487e38588b8659b3aa2dc Patch
https://git.kernel.org/stable/c/d10855876a6f47add6ff621cef25cc0171dac162 Patch
https://git.kernel.org/stable/c/d5730780e9ea84e5476752a47c749036c6a74af5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 21:22

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: mapas: Se corrige la fuga de recuento de referencias en ap_flash_init. of_find_matching_node() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha añadido la función of_node_put() que falta para evitar la fuga de recuento de referencias.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/77087a04c8fd554134bddcb8a9ff87b21f357926 - () https://git.kernel.org/stable/c/77087a04c8fd554134bddcb8a9ff87b21f357926 - Patch
References () https://git.kernel.org/stable/c/80b1465b2ae81ebb59bbe62bcb7a7f7d4e9ece6f - () https://git.kernel.org/stable/c/80b1465b2ae81ebb59bbe62bcb7a7f7d4e9ece6f - Patch
References () https://git.kernel.org/stable/c/941ef6997f9db704fe4fd62fc01e420fdd5048b2 - () https://git.kernel.org/stable/c/941ef6997f9db704fe4fd62fc01e420fdd5048b2 - Patch
References () https://git.kernel.org/stable/c/995fb2874bb5696357846a91e59181c600e6aac8 - () https://git.kernel.org/stable/c/995fb2874bb5696357846a91e59181c600e6aac8 - Patch
References () https://git.kernel.org/stable/c/a74322d4b897ddc268b340c4a397f6066c2f945d - () https://git.kernel.org/stable/c/a74322d4b897ddc268b340c4a397f6066c2f945d - Patch
References () https://git.kernel.org/stable/c/babd7b0124650ab71a6487e38588b8659b3aa2dc - () https://git.kernel.org/stable/c/babd7b0124650ab71a6487e38588b8659b3aa2dc - Patch
References () https://git.kernel.org/stable/c/d10855876a6f47add6ff621cef25cc0171dac162 - () https://git.kernel.org/stable/c/d10855876a6f47add6ff621cef25cc0171dac162 - Patch
References () https://git.kernel.org/stable/c/d5730780e9ea84e5476752a47c749036c6a74af5 - () https://git.kernel.org/stable/c/d5730780e9ea84e5476752a47c749036c6a74af5 - Patch
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 21:22

NVD link : CVE-2022-50160

Mitre link : CVE-2022-50160

CVE.ORG link : CVE-2022-50160

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other