What’s Vulnerable › Vulnerabilities

CVE-2022-50141: mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() checks null pointer.

Affected products

• Linux kernel: from 4.12 before 4.14.291; from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18 — fixed in 4.14.291, 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 4.14.291, 4.19.256, 5.10.137, 5.15.61. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933
• https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a
• https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc
• https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a
• https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820
• https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a
• https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a
• https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45

Get alerted when CVE-2022-50141 or the next vulnerability affects your stack