CVE-2022-50017

mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

We should call of_node_put() for the reference 'uctl_node' returned by of_get_parent() which will increase the refcount. Otherwise, there will be a refcount leak bug.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 9d1afa0169a84dcd5b79901d792edeb8403684abAffected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before af87a469695dc2b2419b2fdff0bf41db5265b325Affected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before c06166a484eece51916dd700a870e53356b7e1bcAffected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 1b49707df679b5510ed06ace7378ddc2aec5c3fbAffected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 1e39037e44d7fa3728686af146f9285ea197097dAffected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 7822d994eb9579a1df4cdbc315db090a041e50f3Affected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before a80016c40cc797c7f3e5a705b8e12ae447280335Affected a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 7a9f743ceead60ed454c46fbc3085ee9a79cbebbAffected
LinuxLinux	4.0Affected before 4.0Not affected 4.9.326 through 4.9.Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.138 through 5.10.Not affected 5.15.63 through 5.15.Not affected 5.19.4 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 9d1afa0169a84dcd5b79901d792edeb8403684abAffected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before af87a469695dc2b2419b2fdff0bf41db5265b325Affected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before c06166a484eece51916dd700a870e53356b7e1bcAffected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 1b49707df679b5510ed06ace7378ddc2aec5c3fbAffected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 1e39037e44d7fa3728686af146f9285ea197097dAffected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 7822d994eb9579a1df4cdbc315db090a041e50f3Affected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before a80016c40cc797c7f3e5a705b8e12ae447280335Affected
a95cfa6b86a19a822877e75d5a73b2a95d249e70 to before 7a9f743ceead60ed454c46fbc3085ee9a79cbebbAffected

LinuxLinux

4.0Affected
before 4.0Not affected
4.9.326 through 4.9.*Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.138 through 5.10.*Not affected
5.15.63 through 5.15.*Not affected
5.19.4 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.