CVE-2022-50121

remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node. Add missing of_node_put() to avoid refcount leak.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/75358732af9b26acfe3e609943290bcba13330fc
https://git.kernel.org/stable/c/cf112a52d758092ca3d5ebdad51dd17bda5ba3e5
https://git.kernel.org/stable/c/61cd8cd3b6b33c7eae3b45cf783b114f2ae53528
https://git.kernel.org/stable/c/3f83c4cf1b78331c23876977aa7b9151aff2f9e1
https://git.kernel.org/stable/c/fa220c05d282e7479abe08b54e3bdffd06c25e97

Frequently Asked Questions

What is the severity of CVE-2022-50121?: CVE-2022-50121 has not yet been assigned a CVSS score.
How to fix CVE-2022-50121?: To fix CVE-2022-50121, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50121 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50121 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50121?: CVE-2022-50121 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.