CVE-2022-50176

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50176
In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcde_dsi_bind Every iteration of for_each_available_child_of_node() decrements the reference counter of the previous node. There is no decrement when break out from the loop and results in refcount leak. Add missing of_node_put() to fix this.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c Patch
https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5 Patch
https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9 Patch
https://git.kernel.org/stable/c/7214902de5b1fb2b632a7b8b3b9540e41aabab38 Patch
https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d Patch
https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Nov 2025, 20:22

Type Values Removed Values Added
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c - () https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c - Patch
References () https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5 - () https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5 - Patch
References () https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9 - () https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9 - Patch
References () https://git.kernel.org/stable/c/7214902de5b1fb2b632a7b8b3b9540e41aabab38 - () https://git.kernel.org/stable/c/7214902de5b1fb2b632a7b8b3b9540e41aabab38 - Patch
References () https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d - () https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d - Patch
References () https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690 - () https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/mcde: Se corrige la fuga de recuento de referencias en mcde_dsi_bind. Cada iteración de for_each_available_child_of_node() decrementa el contador de referencias del nodo anterior. No se produce decremento al salir del bucle, lo que provoca una fuga de recuento de referencias. Para solucionar esto, se ha añadido la función of_node_put() (faltante).

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-25 20:22

NVD link : CVE-2022-50176

Mitre link : CVE-2022-50176

CVE.ORG link : CVE-2022-50176

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other