What’s Vulnerable › Vulnerabilities

CVE-2022-50120: remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. This function has two paths missing of_node_put().

Affected products

• Linux kernel: from 4.14 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.15.61, 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.61, 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0dc1663e3fc22c72e1ab33be7701a0d51cca84ef
• https://git.kernel.org/stable/c/16da9f84e26f89e58cac194ff19fefd9de27d975
• https://git.kernel.org/stable/c/61afafe8b938bc74841cf4b1a73dd08b9d287c5a
• https://git.kernel.org/stable/c/d8ac68927856c3a6d197a95be73c92ec0bd4b012

Get alerted when CVE-2022-50120 or the next vulnerability affects your stack