CVE-2022-50161

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50161
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/33ec82a6d2b119938f26e5c8040ed5d92378eb54 Patch
https://git.kernel.org/stable/c/3c8de6a838b7e0eb392754ac89dd66e698684342 Patch
https://git.kernel.org/stable/c/4d67c8f74d804b20febf716ec96e9a475457ec60 Patch
https://git.kernel.org/stable/c/52ae2b14f76ef2d490337ddc0037bc37125be7b8 Patch
https://git.kernel.org/stable/c/5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbce Patch
https://git.kernel.org/stable/c/79e57889aa0d92a6d769bad808fb105e7b6ea495 Patch
https://git.kernel.org/stable/c/9124d51e01232a91da4034768a2a8d1688472179 Patch
https://git.kernel.org/stable/c/f516fbb63873ee23cba5b7c3d239677c30f13df8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 21:21

Type Values Removed Values Added
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/33ec82a6d2b119938f26e5c8040ed5d92378eb54 - () https://git.kernel.org/stable/c/33ec82a6d2b119938f26e5c8040ed5d92378eb54 - Patch
References () https://git.kernel.org/stable/c/3c8de6a838b7e0eb392754ac89dd66e698684342 - () https://git.kernel.org/stable/c/3c8de6a838b7e0eb392754ac89dd66e698684342 - Patch
References () https://git.kernel.org/stable/c/4d67c8f74d804b20febf716ec96e9a475457ec60 - () https://git.kernel.org/stable/c/4d67c8f74d804b20febf716ec96e9a475457ec60 - Patch
References () https://git.kernel.org/stable/c/52ae2b14f76ef2d490337ddc0037bc37125be7b8 - () https://git.kernel.org/stable/c/52ae2b14f76ef2d490337ddc0037bc37125be7b8 - Patch
References () https://git.kernel.org/stable/c/5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbce - () https://git.kernel.org/stable/c/5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbce - Patch
References () https://git.kernel.org/stable/c/79e57889aa0d92a6d769bad808fb105e7b6ea495 - () https://git.kernel.org/stable/c/79e57889aa0d92a6d769bad808fb105e7b6ea495 - Patch
References () https://git.kernel.org/stable/c/9124d51e01232a91da4034768a2a8d1688472179 - () https://git.kernel.org/stable/c/9124d51e01232a91da4034768a2a8d1688472179 - Patch
References () https://git.kernel.org/stable/c/f516fbb63873ee23cba5b7c3d239677c30f13df8 - () https://git.kernel.org/stable/c/f516fbb63873ee23cba5b7c3d239677c30f13df8 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: mapas: Se corrige la fuga de recuento de referencias en of_flash_probe_versatile. of_find_matching_node_and_match() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha añadido la función of_node_put() que falta para evitar la fuga de recuento de referencias.

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 21:21

NVD link : CVE-2022-50161

Mitre link : CVE-2022-50161

CVE.ORG link : CVE-2022-50161

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other