CVE-2022-50122

ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:02 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Fix refcount leak in some error paths.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2114.6 ≤ v < 4.14.2914.6 ≤ v < 4.19.2564.6 ≤ v < 5.10.1374.6 ≤ v < 5.15.614.6 ≤ v < 5.18.184.6 ≤ v < 5.19.24.6 ≤ v < 5.4.2114.6 ≤ v < 6.05.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.1370f83f9296d5c91d08cf46cf1ba8a17fb870dedf04.6
Vendor states this is fixed in 06ace427953f5036b64aed658f0055f65d76fd27 (fixed)
Vendor states this is fixed in 403d46971936f9f704b91cecffe66e44aa39e915 (fixed)
Vendor states this is fixed in 5ec83aa7a9e5bcca80ccd49978916feb4e0ffc07 (fixed)
Vendor states this is fixed in 79f566907d27abbd7600cebe51def5081d5796b5 (fixed)
Vendor states this is fixed in 994f2edeeb2114bb22b62741cb8fb030fc7e5441 (fixed)
Vendor states this is fixed in e024a24fb264523149658c10c76bb363b3d0004d (fixed)
Vendor states this is fixed in e38e4952ac7a316c9002af30980d6aa850214474 (fixed)
Vendor states this is fixed in efe2178d1a32492f99e7f1f2568eea5c88a85729 (fixed)
Vendor states this is fixed in 4.14.291 (unaffected)
Vendor states this is fixed in 4.19.256 (unaffected)
Vendor states this is fixed in 4.6 (unaffected)
Vendor states this is fixed in 5.10.137 (unaffected)
Vendor states this is fixed in 5.15.61 (unaffected)
Vendor states this is fixed in 5.18.18 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 5.4.211 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/06ace427953f5036b64aed658f0055f65d76fd27
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/403d46971936f9f704b91cecffe66e44aa39e915
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5ec83aa7a9e5bcca80ccd49978916feb4e0ffc07
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/79f566907d27abbd7600cebe51def5081d5796b5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/994f2edeeb2114bb22b62741cb8fb030fc7e5441
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e024a24fb264523149658c10c76bb363b3d0004d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e38e4952ac7a316c9002af30980d6aa850214474
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/efe2178d1a32492f99e7f1f2568eea5c88a85729

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card