CVE-2022-50309
published 2025-09-15CVE-2022-50309: In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init of_get_child_by_name()…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
of_get_child_by_name() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 7b0efe7534071e0153708886355d80db69525d50 | 7b0efe7534071e0153708886355d80db69525d50 |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 6e7b3b1e4e9f739800cd8010b75a9bee8d808cee | 6e7b3b1e4e9f739800cd8010b75a9bee8d808cee |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 3c38467c3255c428cdbd3cefaccca4662f302dc9 | 3c38467c3255c428cdbd3cefaccca4662f302dc9 |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 59b315353252abe7b8fdb8651ca31b8484ce287a | 59b315353252abe7b8fdb8651ca31b8484ce287a |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 2630cc88327a5557aa0d9cc63be95e3c6e0a55b3 | 2630cc88327a5557aa0d9cc63be95e3c6e0a55b3 |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 2ea7caa9684687cf3adc1467cf4af3653a776192 | 2ea7caa9684687cf3adc1467cf4af3653a776192 |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 22b93530bbe6af9dce8e520bb6e978d1bda39d2b | 22b93530bbe6af9dce8e520bb6e978d1bda39d2b |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 3336210948b22c2db43e9df2ea403d251b4d24ab | 3336210948b22c2db43e9df2ea403d251b4d24ab |
| linux | linux | >= df3305156f989339529b3d6744b898d498fb1f7b < 1c78f19c3a0ea312a8178a6bfd8934eb93e9b10a | 1c78f19c3a0ea312a8178a6bfd8934eb93e9b10a |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.1 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 4.10 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50309 [MEDIUM] kernel: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
kernel: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
In the Linux kernel, the following vulnerability has been resolved:
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
of_get_child_by_name() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9)
Red Hat
kernel: net/smc: Transitional solution for clcsock race issue
vendor_redhat·2024-06-20·CVSS 4.7
CVE-2022-48751 [MEDIUM] kernel: net/smc: Transitional solution for clcsock race issue
kernel: net/smc: Transitional solution for clcsock race issue
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Transitional solution for clcsock race issue
We encountered a crash in smc_setsockopt() and it is caused by
accessing smc->clcsock after clcsock was released.
BUG: kernel NULL pointer dereference, address: 0000000000000020
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E 5.16.0-rc4+ #53
RIP: 0010:smc_setsockopt+0x59/0x280 [smc]
Call Trace:
__sys_setsockopt+0xfc/0x190
__x64_sys_setsockopt+0x20/0x30
do_syscall_64+0x34/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f16ba83918e
This patch tries to fix it by
Debian
CVE-2022-50309: linux - In the Linux kernel, the following vulnerability has been resolved: media: xili...
vendor_debian·2022·CVSS 5.5
CVE-2022-50309 [MEDIUM] CVE-2022-50309: linux - In the Linux kernel, the following vulnerability has been resolved: media: xili...
In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
GHSA
GHSA-v7wh-fv5v-f7px: In the Linux kernel, the following vulnerability has been resolved:
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
of_get_child_by_na
ghsa_unreviewed·2025-09-15
CVE-2022-50309 [MEDIUM] GHSA-v7wh-fv5v-f7px: In the Linux kernel, the following vulnerability has been resolved:
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
of_get_child_by_na
In the Linux kernel, the following vulnerability has been resolved:
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
of_get_child_by_name() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
OSV
CVE-2022-50309: In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init of_get_child_by_name
osv·2025-09-15·CVSS 5.5
CVE-2022-50309 [MEDIUM] CVE-2022-50309: In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init of_get_child_by_name
In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1c78f19c3a0ea312a8178a6bfd8934eb93e9b10ahttps://git.kernel.org/stable/c/22b93530bbe6af9dce8e520bb6e978d1bda39d2bhttps://git.kernel.org/stable/c/2630cc88327a5557aa0d9cc63be95e3c6e0a55b3https://git.kernel.org/stable/c/2ea7caa9684687cf3adc1467cf4af3653a776192https://git.kernel.org/stable/c/3336210948b22c2db43e9df2ea403d251b4d24abhttps://git.kernel.org/stable/c/3c38467c3255c428cdbd3cefaccca4662f302dc9https://git.kernel.org/stable/c/59b315353252abe7b8fdb8651ca31b8484ce287ahttps://git.kernel.org/stable/c/6e7b3b1e4e9f739800cd8010b75a9bee8d808ceehttps://git.kernel.org/stable/c/7b0efe7534071e0153708886355d80db69525d50
2025-09-15
Published