What’s Vulnerable › Vulnerabilities

CVE-2022-50209: meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2 — fixed in 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211

How to fix

Upgrade to a fixed version: Linux kernel 4.19.256, 5.10.137, 5.15.61, 5.18.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c1757480a6a61b8c3164ed371c359edb3928f12
• https://git.kernel.org/stable/c/2691b8780f88e1b8b3578a5bc78a0011741bbd74
• https://git.kernel.org/stable/c/69a64c77aafcf3c772264a36214937514e31ad82
• https://git.kernel.org/stable/c/6b28bf3e044f12db0fc18c42f58ae7fc3fa0144a
• https://git.kernel.org/stable/c/8a4a33b3e898b13c750b1c0c9643516c7bf6473f
• https://git.kernel.org/stable/c/a2106f38077e78afcb4bf98fdda3e162118cfb3d
• https://git.kernel.org/stable/c/e21744c6a0d4116a2d6ebccd947620ca4c952e92

Get alerted when CVE-2022-50209 or the next vulnerability affects your stack