What’s Vulnerable › Vulnerabilities

CVE-2022-50108: mfd: max77620: Fix refcount leak in max77620_initialise_fps

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: max77620: Fix refcount leak in max77620_initialise_fps of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: from 4.7 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211

How to fix

Upgrade to a fixed version: Linux kernel 5.10.137, 5.15.61, 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1520669c8255bd637c6b248b2be910e2688d38dd
• https://git.kernel.org/stable/c/50d5fe8cb94c319cb4316f4d824570c075565354
• https://git.kernel.org/stable/c/a29c40814039535b950149311986a5f348b5db14
• https://git.kernel.org/stable/c/afdbadbf18c19779d7bc5df70d872924f9bbd76b
• https://git.kernel.org/stable/c/b948ff8a9e9ad46d4dff9127777caa14c8c2b53c
• https://git.kernel.org/stable/c/facd31bbc799f4d0cd25d9d688af7ca41e7f38ee

Get alerted when CVE-2022-50108 or the next vulnerability affects your stack