CVE-2022-50703
published 2025-12-24CVE-2022-50703: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak…
PriorityP419low5.5
EPSS
0.21%
11.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 1bbe75d466e5118b7d49ef4a346c3ce5742da4e8 | 1bbe75d466e5118b7d49ef4a346c3ce5742da4e8 |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43 | bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43 |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 42df28994eba7b56c762f7bbe7efd5611a1cd15b | 42df28994eba7b56c762f7bbe7efd5611a1cd15b |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 1e3ed59370c712df436791efed120f0c082aa9bc | 1e3ed59370c712df436791efed120f0c082aa9bc |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 39781c98ad46b4e85053345dff797240c1ed7935 | 39781c98ad46b4e85053345dff797240c1ed7935 |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 96e0028debdd07a6d582f0dfadf9a3ec2b5fffff | 96e0028debdd07a6d582f0dfadf9a3ec2b5fffff |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < 8fb6112bd49c0e49f2cf51604231d85ff00284bb | 8fb6112bd49c0e49f2cf51604231d85ff00284bb |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d | ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d |
| linux | linux | >= c97c4090ff72297a878a37715bd301624b71c885 < af8f6f39b8afd772fda4f8e61823ef8c021bf382 | af8f6f39b8afd772fda4f8e61823ef8c021bf382 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.10.0 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15.0 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20.0 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 4.5.0 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 5.11.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.20.0 < 6.0.3 | 6.0.3 |
| linux | linux_kernel | >= 5.5.0 < 5.10.150 | 5.10.150 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50703 [LOW] CWE-772 kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a refcount leak in the `qcom_smsm_probe()` function. This could lead to a Denial of Service (DoS) due to resource exhaustion, making the sys
Debian
CVE-2022-50703: linux - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: ...
vendor_debian·2022
CVE-2022-50703 CVE-2022-50703: linux - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: ...
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
GHSA
GHSA-mgcr-xqh2-vjw4: In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refco
ghsa_unreviewed·2025-12-24
CVE-2022-50703 GHSA-mgcr-xqh2-vjw4: In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refco
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
OSV
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
osv·2025-12-24
CVE-2022-50703 soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
OSV
CVE-2022-50703: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcoun
osv·2025-12-24
CVE-2022-50703 CVE-2022-50703: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcoun
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50703 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50703 CVE-2022-50703 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50703 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probabi
Bugzilla
CVE-2022-50703 kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
bugzilla·2025-12-24
CVE-2022-50703 [LOW] CVE-2022-50703 kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
CVE-2022-50703 kernel: Kernel: Denial of Service via refcount leak in qcom_smsm_probe()
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
There are two refcount leak bugs in qcom_smsm_probe():
(1) The 'local_node' is escaped out from for_each_child_of_node() as
the break of iteration, we should call of_node_put() for it in error
path or when it is not used anymore.
(2) The 'node' is escaped out from for_each_available_child_of_node()
as the 'goto', we should call of_node_put() for it in goto target.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122419-CVE-2022-50703-1c22@gregkh/T
https://git.kernel.org/stable/c/1bbe75d466e5118b7d49ef4a346c3ce5742da4e8https://git.kernel.org/stable/c/1e3ed59370c712df436791efed120f0c082aa9bchttps://git.kernel.org/stable/c/39781c98ad46b4e85053345dff797240c1ed7935https://git.kernel.org/stable/c/42df28994eba7b56c762f7bbe7efd5611a1cd15bhttps://git.kernel.org/stable/c/8fb6112bd49c0e49f2cf51604231d85ff00284bbhttps://git.kernel.org/stable/c/96e0028debdd07a6d582f0dfadf9a3ec2b5fffffhttps://git.kernel.org/stable/c/af8f6f39b8afd772fda4f8e61823ef8c021bf382https://git.kernel.org/stable/c/bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43https://git.kernel.org/stable/c/ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d
2025-12-24
Published