CVE-2022-50188: drm/meson: Fix refcount leak in meson_encoder_hdmi_init

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount leak in meson_encoder_hdmi_init of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() in error path to avoid refcount leak.

Affected products

Linux kernel: from 5.17 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/50446ac34545580d073ff0dd154b796726772668
https://git.kernel.org/stable/c/7381076809586528e2a812a709e2758916318a99
https://git.kernel.org/stable/c/79b15eb0aa059b3a5bc60364ce82eb2cefac80db
https://git.kernel.org/stable/c/bfcca6234b2a36d213f0cc1c127becc17680f7df

Get alerted when CVE-2022-50188 or the next vulnerability affects your stack