CVE-2022-50199

ARM: OMAP2+: Fix refcount leak in omapdss_init_of

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdss_init_of omapdss_find_dss_of_node() calls of_find_compatible_node() to get device node. of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in later error path and normal path.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/935035cf97c8cd6794044b500fb0a44a6d30ffa1
https://git.kernel.org/stable/c/14bac0c7035bf920e190a63c7e1b113c72eadbf4
https://git.kernel.org/stable/c/230ad40a59c9a9ee8f3822b9a7bec09404102ebc
https://git.kernel.org/stable/c/a32dc6829e33c54e751346aa3e08ddb6d0e1a6a0
https://git.kernel.org/stable/c/507159facf002d113c4878fec67f37d62f187887
https://git.kernel.org/stable/c/9705db1eff38d6b9114121f9e253746199b759c9

Frequently Asked Questions

What is the severity of CVE-2022-50199?: CVE-2022-50199 has not yet been assigned a CVSS score.
How to fix CVE-2022-50199?: To fix CVE-2022-50199, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50199 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50199 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50199?: CVE-2022-50199 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.