CVE-2022-50572
BaseFortify
Publication date: 2025-10-22
Last updated on: 2025-10-22
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a reference count leak in the Linux kernel's ASoC audio-graph-card component. Specifically, in the function __graph_for_each_link(), the of_get_next_child() function increments the reference count of a node but the previous node's reference count is decremented incorrectly in an error path, leading to a leak. The fix involves properly calling of_node_put() for the cpu_ep node to manage the reference count correctly.
How can this vulnerability impact me? :
The vulnerability causes a reference count leak in kernel memory management, which can lead to resource leaks and potentially degrade system stability or performance over time. However, there is no indication that it leads to direct security breaches such as privilege escalation or data corruption.