What’s Vulnerable › Vulnerabilities

CVE-2022-50191: regulator: of: Fix refcount leak bug in of_get_regulation_constraints()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() We should call the of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

Affected products

• Linux kernel: from 3.19 before 4.14.291; from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18 — fixed in 4.14.291, 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 4.14.291, 4.19.256, 5.10.137, 5.15.61. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11ecb4f8735b0230d54a82c18b21ea778b695d61
• https://git.kernel.org/stable/c/332e555dca074c4eb2084898021c3676423814c3
• https://git.kernel.org/stable/c/35f9e861d9b9434903a8ede37a3561f78985826d
• https://git.kernel.org/stable/c/66efb665cd5ad69b27dca8571bf89fc6b9c628a4
• https://git.kernel.org/stable/c/a23098cc32860272dc6c3200ff20c34c65b7b694
• https://git.kernel.org/stable/c/b9ca8585c766616563cf3c062c6878f61f83cf00
• https://git.kernel.org/stable/c/c9df8ff290097aabd5c9200f7f729b0813d37b19
• https://git.kernel.org/stable/c/fc7b19f547bc9e622060a0a9a39da2330aa21c53

Get alerted when CVE-2022-50191 or the next vulnerability affects your stack