CVE-2022-50104

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xive_get_max_prio of_find_node_by_path() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Affected Software (10)

VendorProductVersion
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < 5ed9709d262bf026b2ff64979fbfe0f496287588
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < f658d5b528ce97a68efbb64ee54f6fe0909b189a
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < d99733ad47a6c990b52e136608455643bfa708f2
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < 6d1e53f7f181a11a8a343def1e0d0209905b7c64
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < ea494e8a9852abd0ba60f69b254ce0d7c38449e2
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < 2e18b869a8d574cfe9ee64df9c3d0a7ac7ed07a8
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < 79b8eae24b7ee157bda07695d802be8576983fa8
Linux Linux eac1e731b59ee3b5f5e641a7765c7ed41ed26226 < 255b650cbec6849443ce2e0cdd187fd5e61c218c
Linux Linux 4.14
linux linux_kernel 4.14 – 4.14.291

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.2%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →