CVE-2022-50038

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50038
In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() In this function, there are two refcount leak bugs: (1) when breaking out of for_each_endpoint_of_node(), we need call the of_node_put() for the 'ep'; (2) we should call of_node_put() for the reference returned by of_graph_get_remote_port() when it is not used anymore.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3aa710e96747c8b4e52ba12ffe09edcb2755897c Patch
https://git.kernel.org/stable/c/6a758f0ba11699837af9e1a0f7cbac6ef765a23e Patch
https://git.kernel.org/stable/c/8dec38e19f6928235d4009ce55f7add8af34e5c7 Patch
https://git.kernel.org/stable/c/91b3c8dbe898df158fd2a84675f3a284ff6666f7 Patch
https://git.kernel.org/stable/c/d58ef256781398ad115aef44de0a02ad27ea6c3a Patch
https://git.kernel.org/stable/c/fc1fc2abfcb9235d0ece9a4d858426fb617cfa66 Patch
https://git.kernel.org/stable/c/fe71d84c1a6c0d54657431e8eeaefc9d24895304 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:56

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/meson: corrige errores de recuento de referencias en meson_vpu_has_available_connectors() En esta función, hay dos errores de pérdida de recuento de referencias: (1) al salir de for_each_endpoint_of_node(), necesitamos llamar a of_node_put() para el 'ep'; (2) debemos llamar a of_node_put() para la referencia devuelta por of_graph_get_remote_port() cuando ya no se usa.
References () https://git.kernel.org/stable/c/3aa710e96747c8b4e52ba12ffe09edcb2755897c - () https://git.kernel.org/stable/c/3aa710e96747c8b4e52ba12ffe09edcb2755897c - Patch
References () https://git.kernel.org/stable/c/6a758f0ba11699837af9e1a0f7cbac6ef765a23e - () https://git.kernel.org/stable/c/6a758f0ba11699837af9e1a0f7cbac6ef765a23e - Patch
References () https://git.kernel.org/stable/c/8dec38e19f6928235d4009ce55f7add8af34e5c7 - () https://git.kernel.org/stable/c/8dec38e19f6928235d4009ce55f7add8af34e5c7 - Patch
References () https://git.kernel.org/stable/c/91b3c8dbe898df158fd2a84675f3a284ff6666f7 - () https://git.kernel.org/stable/c/91b3c8dbe898df158fd2a84675f3a284ff6666f7 - Patch
References () https://git.kernel.org/stable/c/d58ef256781398ad115aef44de0a02ad27ea6c3a - () https://git.kernel.org/stable/c/d58ef256781398ad115aef44de0a02ad27ea6c3a - Patch
References () https://git.kernel.org/stable/c/fc1fc2abfcb9235d0ece9a4d858426fb617cfa66 - () https://git.kernel.org/stable/c/fc1fc2abfcb9235d0ece9a4d858426fb617cfa66 - Patch
References () https://git.kernel.org/stable/c/fe71d84c1a6c0d54657431e8eeaefc9d24895304 - () https://git.kernel.org/stable/c/fe71d84c1a6c0d54657431e8eeaefc9d24895304 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:56

NVD link : CVE-2022-50038

Mitre link : CVE-2022-50038

CVE.ORG link : CVE-2022-50038

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other