CVE-2022-50183: drm/meson: encoder_cvbs: Fix refcount leak in meson_encoder_cvbs_init

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/meson: encoder_cvbs: Fix refcount leak in meson_encoder_cvbs_init of_graph_get_remote_node() returns remote device nodepointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Affected products

Linux kernel: from 5.17 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/51c36411ae27bf5f06c43462d2de2d4947ed33ea
https://git.kernel.org/stable/c/7d255ddbbf679aa47e041cbf68520fd985ed2279
https://git.kernel.org/stable/c/bb5ac08d5bd8626c318bd80a5063263daab8fdb6

Get alerted when CVE-2022-50183 or the next vulnerability affects your stack