What’s Vulnerable › Vulnerabilities

CVE-2022-50207: ARM: bcm: Fix refcount leak in bcm_kona_smc_init

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: Fix refcount leak in bcm_kona_smc_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: from 3.10 before 4.14.291; from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18 — fixed in 4.14.291, 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 4.14.291, 4.19.256, 5.10.137, 5.15.61. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02b658bfb26452f2c13e4577a13ab802f89a6642
• https://git.kernel.org/stable/c/5afe042c889437de83f38a9d73d145742fb4f65f
• https://git.kernel.org/stable/c/62d719d31ec667276d7375b64542b080cf187797
• https://git.kernel.org/stable/c/75866df2b1d673df5b7781e565ada753a7895f04
• https://git.kernel.org/stable/c/91e7f04f53e680bc72f0a9a5c682ab652100b9c8
• https://git.kernel.org/stable/c/bc7f487395f208fd9af69e9a807815e10435aba7
• https://git.kernel.org/stable/c/c6964cb9ac7a43bf78e7d60126e2722992de2ea1
• https://git.kernel.org/stable/c/cb23389a2458c2e4bfd6c86a513cbbe1c4d35e76

Get alerted when CVE-2022-50207 or the next vulnerability affects your stack