CVE-2022-50176

drm/mcde: Fix refcount leak in mcde_dsi_bind

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:03 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcde_dsi_bind Every iteration of for_each_available_child_of_node() decrements the reference counter of the previous node. There is no decrement when break out from the loop and results in refcount leak. Add missing of_node_put() to fix this.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.3 ≤ v < 5.10.1375.3 ≤ v < 5.15.615.3 ≤ v < 5.18.185.3 ≤ v < 5.19.25.3 ≤ v < 5.4.2115.3 ≤ v < 6.05.5 ≤ v < 5.10.1375.35fc537bfd00033a3f813330175f7f12c25957ebf
Vendor states this is fixed in 3123ae6fdd4013d24a3a4877084b14e917faae5c (fixed)
Vendor states this is fixed in 32c827e30bb44ae809950a9efab59e98e44d30e5 (fixed)
Vendor states this is fixed in 3a149169e4a2f9127022fec6ef5d71b4e804b3b9 (fixed)
Vendor states this is fixed in 7214902de5b1fb2b632a7b8b3b9540e41aabab38 (fixed)
Vendor states this is fixed in 87c35bbefdfa3c5edfb8c80f5c04717aaacc629d (fixed)
Vendor states this is fixed in f57699a9b66ea11f000f56d1f1179059239b8690 (fixed)
Vendor states this is fixed in 5.10.137 (unaffected)
Vendor states this is fixed in 5.15.61 (unaffected)
Vendor states this is fixed in 5.18.18 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 5.3 (unaffected)
Vendor states this is fixed in 5.4.211 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7214902de5b1fb2b632a7b8b3b9540e41aabab38
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card