What’s Vulnerable › Vulnerabilities

CVE-2022-50199: ARM: OMAP2+: Fix refcount leak in omapdss_init_of

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls of_find_compatible_node() to get device node. of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in later error path and normal path.

Affected products

• Linux kernel: from 4.20.1 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2; 4.20, 4.20-rc3, 4.20-rc4, 4.20-rc5, 4.20-rc6, 4.20-rc7 — fixed in 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211

How to fix

Upgrade to a fixed version: Linux kernel 5.10.137, 5.15.61, 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/14bac0c7035bf920e190a63c7e1b113c72eadbf4
• https://git.kernel.org/stable/c/230ad40a59c9a9ee8f3822b9a7bec09404102ebc
• https://git.kernel.org/stable/c/507159facf002d113c4878fec67f37d62f187887
• https://git.kernel.org/stable/c/935035cf97c8cd6794044b500fb0a44a6d30ffa1
• https://git.kernel.org/stable/c/9705db1eff38d6b9114121f9e253746199b759c9
• https://git.kernel.org/stable/c/a32dc6829e33c54e751346aa3e08ddb6d0e1a6a0

Get alerted when CVE-2022-50199 or the next vulnerability affects your stack