CVE-2022-50161
published 2025-06-18CVE-2022-50161: In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and_match()…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
mtd: maps: Fix refcount leak in of_flash_probe_versatile
of_find_matching_node_and_match() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 3c8de6a838b7e0eb392754ac89dd66e698684342 | 3c8de6a838b7e0eb392754ac89dd66e698684342 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 79e57889aa0d92a6d769bad808fb105e7b6ea495 | 79e57889aa0d92a6d769bad808fb105e7b6ea495 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 9124d51e01232a91da4034768a2a8d1688472179 | 9124d51e01232a91da4034768a2a8d1688472179 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 52ae2b14f76ef2d490337ddc0037bc37125be7b8 | 52ae2b14f76ef2d490337ddc0037bc37125be7b8 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 4d67c8f74d804b20febf716ec96e9a475457ec60 | 4d67c8f74d804b20febf716ec96e9a475457ec60 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbce | 5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbce |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < f516fbb63873ee23cba5b7c3d239677c30f13df8 | f516fbb63873ee23cba5b7c3d239677c30f13df8 |
| linux | linux | >= b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 < 33ec82a6d2b119938f26e5c8040ed5d92378eb54 | 33ec82a6d2b119938f26e5c8040ed5d92378eb54 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.15 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 4.7 < 4.14.291 | 4.14.291 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50161: In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and
osv·2025-06-18·CVSS 5.5
CVE-2022-50161 [MEDIUM] CVE-2022-50161: In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
GHSA
GHSA-mm99-4777-34v7: In the Linux kernel, the following vulnerability has been resolved:
mtd: maps: Fix refcount leak in of_flash_probe_versatile
of_find_matching_node_a
ghsa_unreviewed·2025-06-18
CVE-2022-50161 [MEDIUM] GHSA-mm99-4777-34v7: In the Linux kernel, the following vulnerability has been resolved:
mtd: maps: Fix refcount leak in of_flash_probe_versatile
of_find_matching_node_a
In the Linux kernel, the following vulnerability has been resolved:
mtd: maps: Fix refcount leak in of_flash_probe_versatile
of_find_matching_node_and_match() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
Red Hat
kernel: mtd: maps: Fix refcount leak in of_flash_probe_versatile
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50161 [MEDIUM] CWE-911 kernel: mtd: maps: Fix refcount leak in of_flash_probe_versatile
kernel: mtd: maps: Fix refcount leak in of_flash_probe_versatile
In the Linux kernel, the following vulnerability has been resolved:
mtd: maps: Fix refcount leak in of_flash_probe_versatile
of_find_matching_node_and_match() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9)
Debian
CVE-2022-50161: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-50161 [MEDIUM] CVE-2022-50161: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: ...
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/33ec82a6d2b119938f26e5c8040ed5d92378eb54https://git.kernel.org/stable/c/3c8de6a838b7e0eb392754ac89dd66e698684342https://git.kernel.org/stable/c/4d67c8f74d804b20febf716ec96e9a475457ec60https://git.kernel.org/stable/c/52ae2b14f76ef2d490337ddc0037bc37125be7b8https://git.kernel.org/stable/c/5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbcehttps://git.kernel.org/stable/c/79e57889aa0d92a6d769bad808fb105e7b6ea495https://git.kernel.org/stable/c/9124d51e01232a91da4034768a2a8d1688472179https://git.kernel.org/stable/c/f516fbb63873ee23cba5b7c3d239677c30f13df8
2025-06-18
Published