CVE-2022-50249

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_get_ddr_timings() We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease the refcount.

Affected Software (11)

VendorProductVersion
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 68c9c4e6495b825be3a8946df1a0148399555fe4
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 85a40bfb8e7a170abcf9dae2c0898a1983e48daa
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 2680690f9ce4e6abbb4f559e97271c15b7eeda97
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 62ccab6e3376f8a22167c3b81468ae4f3e7d25f1
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 1c6cac6fa4d08aea161f83d38117d733b3c3a000
Linux Linux e6b42eb6a66c188642aeb447312938c6f6ebee86 < 05215fb32010d4afb68fbdbb4d237df6e2d4567b
Linux Linux 3.7
linux linux_kernel 3.7 – 4.9.331

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001630
Percentile 5.6%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →