CVE-2022-50572

published 2025-10-22

CVE-2022-50572: In the Linux kernel, the following vulnerability has been resolved: ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() The…

Priority P4 18

In the Linux kernel, the following vulnerability has been resolved:

ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

The of_get_next_child() returns a node with refcount incremented, and
decrements the refcount of prev. So in the error path of the while loop,
of_node_put() needs be called for cpu_ep.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < ed1376f771404917c2ec3ebc617431ec01146134	ed1376f771404917c2ec3ebc617431ec01146134
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < 06c9d468c06806dab752eb8e72addbf3792c1023	06c9d468c06806dab752eb8e72addbf3792c1023
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < 85eb5c952b7fe2d2059beaa4a4dd26688b25547b	85eb5c952b7fe2d2059beaa4a4dd26688b25547b
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < 49dad92af6892f46851af989ef3aa7cd7316c389	49dad92af6892f46851af989ef3aa7cd7316c389
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < 4cc8431ec77a43ea106d8bde0860c61cfdda1cd0	4cc8431ec77a43ea106d8bde0860c61cfdda1cd0
linux	linux	>= fce9b90c1ab7e915553c57353355700c79b39c86 < 8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0	8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 5.1.0 < 5.4.229	5.4.229
linux	linux_kernel	>= 5.11.0 < 5.15.86	5.15.86
linux	linux_kernel	>= 5.16.0 < 6.0.16	6.0.16
linux	linux_kernel	>= 5.5.0 < 5.10.163	5.10.163
linux	linux_kernel	>= 6.1.0 < 6.1.2	6.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.