CVE-2022-50121

remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init

MEDIUM

5.5

CVSS Score

Published: June 18, 2025 at 11:02 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node. Add missing of_node_put() to avoid refcount leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.10 ≤ v < 5.10.1375.10 ≤ v < 5.15.615.10 ≤ v < 5.18.185.10 ≤ v < 5.19.25.10 ≤ v < 6.05.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.106dedbd1d544389d6ab1727423348572a11e9df5d

Vendor states this is fixed in 3f83c4cf1b78331c23876977aa7b9151aff2f9e1 (fixed)

Vendor states this is fixed in 61cd8cd3b6b33c7eae3b45cf783b114f2ae53528 (fixed)

Vendor states this is fixed in 75358732af9b26acfe3e609943290bcba13330fc (fixed)

Vendor states this is fixed in cf112a52d758092ca3d5ebdad51dd17bda5ba3e5 (fixed)

Vendor states this is fixed in fa220c05d282e7479abe08b54e3bdffd06c25e97 (fixed)

Vendor states this is fixed in 5.10 (unaffected)

Vendor states this is fixed in 5.10.137 (unaffected)

Vendor states this is fixed in 5.15.61 (unaffected)

Vendor states this is fixed in 5.18.18 (unaffected)

Vendor states this is fixed in 5.19.2 (unaffected)

Vendor states this is fixed in 6.0 (unaffected)