CVE-2022-50191

regulator: of: Fix refcount leak bug in of_get_regulation_constraints()

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:03 AM UTC
Updated: June 17, 2026 at 05:22 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() We should call the of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.19 ≤ v < 4.14.2913.19 ≤ v < 4.19.2563.19 ≤ v < 5.10.1373.19 ≤ v < 5.15.613.19 ≤ v < 5.18.183.19 ≤ v < 5.19.23.19 ≤ v < 5.4.2113.19 ≤ v < 6.04.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2115.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.1373.1940e20d68bb3fb1ce2704c886d597918988d3321d
Vendor states this is fixed in 11ecb4f8735b0230d54a82c18b21ea778b695d61 (fixed)
Vendor states this is fixed in 332e555dca074c4eb2084898021c3676423814c3 (fixed)
Vendor states this is fixed in 35f9e861d9b9434903a8ede37a3561f78985826d (fixed)
Vendor states this is fixed in 66efb665cd5ad69b27dca8571bf89fc6b9c628a4 (fixed)
Vendor states this is fixed in a23098cc32860272dc6c3200ff20c34c65b7b694 (fixed)
Vendor states this is fixed in b9ca8585c766616563cf3c062c6878f61f83cf00 (fixed)
Vendor states this is fixed in c9df8ff290097aabd5c9200f7f729b0813d37b19 (fixed)
Vendor states this is fixed in fc7b19f547bc9e622060a0a9a39da2330aa21c53 (fixed)
Vendor states this is fixed in 3.19 (unaffected)
Vendor states this is fixed in 4.14.291 (unaffected)
Vendor states this is fixed in 4.19.256 (unaffected)
Vendor states this is fixed in 5.10.137 (unaffected)
Vendor states this is fixed in 5.15.61 (unaffected)
Vendor states this is fixed in 5.18.18 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 5.4.211 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/11ecb4f8735b0230d54a82c18b21ea778b695d61
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/332e555dca074c4eb2084898021c3676423814c3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/35f9e861d9b9434903a8ede37a3561f78985826d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/66efb665cd5ad69b27dca8571bf89fc6b9c628a4
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a23098cc32860272dc6c3200ff20c34c65b7b694
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b9ca8585c766616563cf3c062c6878f61f83cf00
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c9df8ff290097aabd5c9200f7f729b0813d37b19
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fc7b19f547bc9e622060a0a9a39da2330aa21c53

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card