CVE-2022-50429

memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()

MEDIUM
5.5
CVSS Score
Published: October 1, 2025 at 11:42 AM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease the refcount.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.755.16 ≤ v < 5.19.175.5 ≤ v < 5.10.1505.5 ≤ v < 5.15.755.5 ≤ v < 5.19.175.5 ≤ v < 6.0.35.5 ≤ v < 6.16.0 ≤ v < 6.0.35.5976897dd96db94c74209d0a0671d7a73aa02fab9
Vendor states this is fixed in 1d312c12c91f831fcc48623c921f2d4560edb159 (fixed)
Vendor states this is fixed in 3b321bf7687968a090cf6b62bd8e67d692f59a16 (fixed)
Vendor states this is fixed in 48af14fb0eaa63d9aa68f59fb0b205ec55a95636 (fixed)
Vendor states this is fixed in 7e053784c4c70df28324106d476778be7a4519b3 (fixed)
Vendor states this is fixed in daab421fc2dc7d6ae7eb20a3f565ae09652c68b9 (fixed)
Vendor states this is fixed in 5.10.150 (unaffected)
Vendor states this is fixed in 5.15.75 (unaffected)
Vendor states this is fixed in 5.19.17 (unaffected)
Vendor states this is fixed in 5.5 (unaffected)
Vendor states this is fixed in 6.0.3 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card