CVE-2022-50777

net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe

N/A

Published: December 24, 2025 at 01:06 PM UTC

Updated: June 17, 2026 at 05:24 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.18.12v ≥ 4.9.1314.14.74 ≤ v < 4.14.3034.18.12 ≤ v < 4.194.19 ≤ v < 4.19.2704.19 ≤ v < 5.10.1634.19 ≤ v < 5.15.874.19 ≤ v < 5.4.2294.19 ≤ v < 6.0.194.19 ≤ v < 6.1.54.19 ≤ v < 6.24.9.131 ≤ v < 4.103f7056e1822d648f8022997497edc6cad2ad1e734.14.74 4.18.12 4.19 4.9.131900812a0d318954400d20b0190c7d788b4ff2cc2a5a849c9e8a6c357f84a5e249cb468f20da6d28fab4e6ee578e88a659938db8fbf33720bc048d29c

Vendor states this is fixed in 00616bd1913a4f879679e02dc08c2f501ca2bd4c (fixed)

Vendor states this is fixed in 106d0d33c9d1ec4ddeeffc1fdc717ff09953d4ed (fixed)

Vendor states this is fixed in 4d112f001612c79927c1ecf29522b34c4fa292e0 (fixed)

Vendor states this is fixed in 52841e71253e6ace72751c72560950474a57d04c (fixed)

Vendor states this is fixed in 53526dbc8aa6b95e9fc2ab1e29b1a9145721da24 (fixed)

Vendor states this is fixed in 78b0b1ff525d9be4babf5a148a4de0d50042d95d (fixed)

Vendor states this is fixed in d039535850ee47079d59527e96be18d8e0daa84b (fixed)

Vendor states this is fixed in ee84d37a5f08ed1121cdd16f8f3ed87552087a21 (fixed)

Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 4.14.303 (unaffected)

Vendor states this is fixed in 4.19 (unaffected)

Vendor states this is fixed in 4.19.270 (unaffected)