CVE-2022-50108

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: max77620: Fix refcount leak in max77620_initialise_fps of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected Software (8)

VendorProductVersion
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < b948ff8a9e9ad46d4dff9127777caa14c8c2b53c
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < afdbadbf18c19779d7bc5df70d872924f9bbd76b
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < facd31bbc799f4d0cd25d9d688af7ca41e7f38ee
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < 50d5fe8cb94c319cb4316f4d824570c075565354
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < a29c40814039535b950149311986a5f348b5db14
Linux Linux 327156c593600e0f08575621c2a56f311d482e7a < 1520669c8255bd637c6b248b2be910e2688d38dd
Linux Linux 4.7
linux linux_kernel 4.7 – 5.4.211

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.25%
Raw Score 0.002470
Percentile 16.0%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →