CVE-2022-50199
published 2025-06-18CVE-2022-50199: In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
10.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
omapdss_find_dss_of_node() calls of_find_compatible_node() to get device
node. of_find_compatible_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when done.
Add missing of_node_put() in later error path and normal path.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < 935035cf97c8cd6794044b500fb0a44a6d30ffa1 | 935035cf97c8cd6794044b500fb0a44a6d30ffa1 |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < 14bac0c7035bf920e190a63c7e1b113c72eadbf4 | 14bac0c7035bf920e190a63c7e1b113c72eadbf4 |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < 230ad40a59c9a9ee8f3822b9a7bec09404102ebc | 230ad40a59c9a9ee8f3822b9a7bec09404102ebc |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < a32dc6829e33c54e751346aa3e08ddb6d0e1a6a0 | a32dc6829e33c54e751346aa3e08ddb6d0e1a6a0 |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < 507159facf002d113c4878fec67f37d62f187887 | 507159facf002d113c4878fec67f37d62f187887 |
| linux | linux | >= e0c827aca0730b51f38081aa4e8ecf0912aab55f < 9705db1eff38d6b9114121f9e253746199b759c9 | 9705db1eff38d6b9114121f9e253746199b759c9 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.20.1 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
| msrc | windows_10_version_1809 | — | — |
| msrc | windows_10_version_20h2 | — | — |
| msrc | windows_10_version_21h1 | — | — |
| msrc | windows_10_version_21h2 | — | — |
| msrc | windows_10_version_22h2 | — | — |
| msrc | windows_11_version_21h2 | — | — |
| msrc | windows_11_version_22h2 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ARM: OMAP2+: Fix refcount leak in omapdss_init_of
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50199 [MEDIUM] CWE-911 kernel: ARM: OMAP2+: Fix refcount leak in omapdss_init_of
kernel: ARM: OMAP2+: Fix refcount leak in omapdss_init_of
In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
omapdss_find_dss_of_node() calls of_find_compatible_node() to get device
node. of_find_compatible_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when done.
Add missing of_node_put() in later error path and normal path.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) -
Microsoft
Windows Human Interface Device Information Disclosure Vulnerability
vendor_msrc·2022-11-08·CVSS 5.5
CVE-2022-41055 [MEDIUM] Windows Human Interface Device Information Disclosure Vulnerability
Windows Human Interface Device Information Disclosure Vulnerability
FAQ: What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.
Windows Devices Human Interface: Windows Devices Human Interface
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Information Disclosure
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5019966
Reference: https://support.microsoft.com/help/50199
Debian
CVE-2022-50199: linux - In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+...
vendor_debian·2022·CVSS 5.5
CVE-2022-50199 [MEDIUM] CVE-2022-50199: linux - In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+...
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls of_find_compatible_node() to get device node. of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in later error path and normal path.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
GHSA
GHSA-4rgm-2mh2-m582: In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
omapdss_find_dss_of_node() cal
ghsa_unreviewed·2025-06-18
CVE-2022-50199 [MEDIUM] GHSA-4rgm-2mh2-m582: In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
omapdss_find_dss_of_node() cal
In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
omapdss_find_dss_of_node() calls of_find_compatible_node() to get device
node. of_find_compatible_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when done.
Add missing of_node_put() in later error path and normal path.
OSV
CVE-2022-50199: In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls
osv·2025-06-18·CVSS 5.5
CVE-2022-50199 [MEDIUM] CVE-2022-50199: In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls of_find_compatible_node() to get device node. of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in later error path and normal path.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/14bac0c7035bf920e190a63c7e1b113c72eadbf4https://git.kernel.org/stable/c/230ad40a59c9a9ee8f3822b9a7bec09404102ebchttps://git.kernel.org/stable/c/507159facf002d113c4878fec67f37d62f187887https://git.kernel.org/stable/c/935035cf97c8cd6794044b500fb0a44a6d30ffa1https://git.kernel.org/stable/c/9705db1eff38d6b9114121f9e253746199b759c9https://git.kernel.org/stable/c/a32dc6829e33c54e751346aa3e08ddb6d0e1a6a0
2025-06-18
Published