What’s Vulnerable › Vulnerabilities

CVE-2022-50176: drm/mcde: Fix refcount leak in mcde_dsi_bind

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcde_dsi_bind Every iteration of for_each_available_child_of_node() decrements the reference counter of the previous node. There is no decrement when break out from the loop and results in refcount leak. Add missing of_node_put() to fix this.

Affected products

• Linux kernel: from 5.3 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211

How to fix

Upgrade to a fixed version: Linux kernel 5.10.137, 5.15.61, 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c
• https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5
• https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9
• https://git.kernel.org/stable/c/7214902de5b1fb2b632a7b8b3b9540e41aabab38
• https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d
• https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690

Get alerted when CVE-2022-50176 or the next vulnerability affects your stack