What’s Vulnerable › Vulnerabilities
CVE-2022-50777: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
- Severity: unknown
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-24 · updated 2026-06-17
Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.
Affected products
- Linux kernel: from 4.14.74 before 4.14.303; from 4.9.131 before 4.10; from 4.18.12 before 4.19; 4.19 — fixed in 4.10, 4.14.303, 4.19, 6.2
How to fix
Upgrade to a fixed version: Linux kernel 4.10, 4.14.303, 4.19, 6.2. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/00616bd1913a4f879679e02dc08c2f501ca2bd4c
- https://git.kernel.org/stable/c/106d0d33c9d1ec4ddeeffc1fdc717ff09953d4ed
- https://git.kernel.org/stable/c/4d112f001612c79927c1ecf29522b34c4fa292e0
- https://git.kernel.org/stable/c/52841e71253e6ace72751c72560950474a57d04c
- https://git.kernel.org/stable/c/53526dbc8aa6b95e9fc2ab1e29b1a9145721da24
- https://git.kernel.org/stable/c/78b0b1ff525d9be4babf5a148a4de0d50042d95d
- https://git.kernel.org/stable/c/d039535850ee47079d59527e96be18d8e0daa84b
- https://git.kernel.org/stable/c/ee84d37a5f08ed1121cdd16f8f3ed87552087a21
Get alerted when CVE-2022-50777 or the next vulnerability affects your stack