BaseFortify

Publication date: 2025-12-24

Last updated on: 2025-12-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-24

Last Modified

2025-12-29

Generated

2026-07-06

AI Q&A

2025-12-24

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50777

EUVD

EUVD-2022-55784

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a reference count leak in the Linux kernel's network PHY driver xgmiitorgmii. Specifically, the function of_phy_find_device() returns a device node with its reference count incremented, but the code did not properly call put_device() to release it when it was no longer needed, causing a resource leak.

Impact Analysis

The reference count leak can lead to resource exhaustion in the kernel, potentially causing degraded system performance or instability over time as resources are not properly freed.

Hi! I’m here to help you understand CVE-2022-50777. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70