CVE-2022-50106

powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:02 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address of_get_next_parent() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() in the error path to avoid refcount leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.23 ≤ v < 4.14.2912.6.23 ≤ v < 4.19.2562.6.23 ≤ v < 5.10.1372.6.23 ≤ v < 5.15.612.6.23 ≤ v < 5.18.182.6.23 ≤ v < 5.19.22.6.23 ≤ v < 5.4.2112.6.23 ≤ v < 6.04.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2115.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.1372.6.23ce21b3c9648ae55181787bf25ee00cf91dfd5c91
Vendor states this is fixed in 00dc7cbbb558955ff410fd392cc9b0366eb06df0 (fixed)
Vendor states this is fixed in 02ed44125d7a7238999750ca126b60f8dd7a88b1 (fixed)
Vendor states this is fixed in 51cf876b11fb6ca06f69e9d1de58f892d1522e9d (fixed)
Vendor states this is fixed in 5eaa93caa63abf382b319dbe2f032232026740c2 (fixed)
Vendor states this is fixed in 6263ec8032c411b8ef6b7f00198cb18c855ee6cb (fixed)
Vendor states this is fixed in af41cff4ada533b1cf40de6c468ba164fd32c22d (fixed)
Vendor states this is fixed in df5d4b616ee76abc97e5bd348e22659c2b095b1c (fixed)
Vendor states this is fixed in f388643657cd5a04dc47a68d85321876c5b4c208 (fixed)
Vendor states this is fixed in 2.6.23 (unaffected)
Vendor states this is fixed in 4.14.291 (unaffected)
Vendor states this is fixed in 4.19.256 (unaffected)
Vendor states this is fixed in 5.10.137 (unaffected)
Vendor states this is fixed in 5.15.61 (unaffected)
Vendor states this is fixed in 5.18.18 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 5.4.211 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/00dc7cbbb558955ff410fd392cc9b0366eb06df0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/02ed44125d7a7238999750ca126b60f8dd7a88b1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/51cf876b11fb6ca06f69e9d1de58f892d1522e9d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5eaa93caa63abf382b319dbe2f032232026740c2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6263ec8032c411b8ef6b7f00198cb18c855ee6cb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/af41cff4ada533b1cf40de6c468ba164fd32c22d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/df5d4b616ee76abc97e5bd348e22659c2b095b1c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f388643657cd5a04dc47a68d85321876c5b4c208

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card