CVE-2022-50119

rpmsg: Fix possible refcount leak in rpmsg_register_device_override()

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:02 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsg_register_device_override() rpmsg_register_device_override need to call put_device to free vch when driver_set_override fails. Fix this by adding a put_device() to the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.19 ≤ v < 5.19.25.19 ≤ v < 6.03d14785980571ebb313a976e589b9d3563adc7045.195f1bb9f4d4b55c39180329c4e379aa740039eed3b585daa34a0a852e6d5e553132b411b6a0192d27bb17d110cbf270d5247a6e261c5ad50e362d1675bfd4a664ddfbe12f008efb0b0ab6bf25a8ab2538c14c6676ad5b78950a45121a7ee6cfb85778e71f
Vendor states this is fixed in 01e6885b75e25a2dd0726455ef18ef9ce5e7dc87 (fixed)
Vendor states this is fixed in 280ae5a028ef5d14ef9277746a3026a30aaebe4f (fixed)
Vendor states this is fixed in 3fdd5b2bb09fc2b5bf3504778f51c89bb48c097f (fixed)
Vendor states this is fixed in c29335612ff44df979678a38e1f55c62004f421c (fixed)
Vendor states this is fixed in c449b28e437d18ae807479c4ac6b69d87b287c79 (fixed)
Vendor states this is fixed in d4c8bf5635c4bedaf2470761ced1f502b2d5434e (fixed)
Vendor states this is fixed in d7bd416d35121c95fe47330e09a5c04adbc5f928 (fixed)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/01e6885b75e25a2dd0726455ef18ef9ce5e7dc87
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/280ae5a028ef5d14ef9277746a3026a30aaebe4f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3fdd5b2bb09fc2b5bf3504778f51c89bb48c097f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c29335612ff44df979678a38e1f55c62004f421c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c449b28e437d18ae807479c4ac6b69d87b287c79
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d4c8bf5635c4bedaf2470761ced1f502b2d5434e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d7bd416d35121c95fe47330e09a5c04adbc5f928

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card