BaseFortify

Publication date: 2025-10-01

Last updated on: 2026-01-21

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease the refcount.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-01

Last Modified

2026-01-21

Generated

2026-07-06

AI Q&A

2025-10-01

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50429

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.5 (inc) to 5.10.150 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.75 (exc)
linux	linux_kernel	From 5.16 (inc) to 5.19.17 (exc)
linux	linux_kernel	From 6.0 (inc) to 6.0.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-Other

Attack-Flow Graph

Impact Analysis

The impact of this vulnerability could be related to resource leaks in the Linux kernel, potentially causing increased memory usage or instability due to improper reference counting. However, specific impacts are not detailed in the provided information.

Executive Summary

This vulnerability is a reference count leak bug in the Linux kernel function of_lpddr3_get_ddr_timings(). It occurs because the function does not properly call of_node_put() when breaking out of the for_each_child_of_node() loop, which manages reference counting. This can lead to incorrect reference counting and potential resource management issues.

Hi! I’m here to help you understand CVE-2022-50429. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70