cbcvebase.
CVE-2022-50032
published 2025-06-18

CVE-2022-50032: In the Linux kernel, the following vulnerability has been resolved: usb: renesas: Fix refcount leak bug In usbhs_rza1_hardware_init(), of_find_node_by_name()…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.6th percentile
In the Linux kernel, the following vulnerability has been resolved: usb: renesas: Fix refcount leak bug In usbhs_rza1_hardware_init(), of_find_node_by_name() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.2-1 (bookworm)linux 6.0.2-1 (bookworm)
linuxlinux
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < 36b18b777dece704b7c2e9e7947ca41a9b0fb00936b18b777dece704b7c2e9e7947ca41a9b0fb009
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < cfa8f707a58d68b2341a9dd0b33cf048f0628b4dcfa8f707a58d68b2341a9dd0b33cf048f0628b4d
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < 9790a5a4f07f38a5add85ec58c44797d3a7c36779790a5a4f07f38a5add85ec58c44797d3a7c3677
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < fbdbd61a36d887e00114321c6758e359e9573a8efbdbd61a36d887e00114321c6758e359e9573a8e
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < 5c4b699193eba51f1bbf462d758d66f545fddd355c4b699193eba51f1bbf462d758d66f545fddd35
linuxlinux>= aec2927b5944df70bca4bdeea6c4e7c3195dc37a < 9d6d5303c39b8bc182475b22f45504106a07f0869d6d5303c39b8bc182475b22f45504106a07f086
linuxlinux_kernel< 4.19.2564.19.256
linuxlinux_kernel>= 0 < 5.10.140-15.10.140-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 4.20 < 5.4.2115.4.211
linuxlinux_kernel>= 5.11 < 5.15.635.15.63
linuxlinux_kernel>= 5.16 < 5.19.45.19.4
linuxlinux_kernel>= 5.5 < 5.10.1385.10.138

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.