CVE-2022-50121

remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init

Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node. Add missing of_node_put() to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6dedbd1d544389d6ab1727423348572a11e9df5d to before 75358732af9b26acfe3e609943290bcba13330fcAffected
  • 6dedbd1d544389d6ab1727423348572a11e9df5d to before cf112a52d758092ca3d5ebdad51dd17bda5ba3e5Affected
  • 6dedbd1d544389d6ab1727423348572a11e9df5d to before 61cd8cd3b6b33c7eae3b45cf783b114f2ae53528Affected
  • 6dedbd1d544389d6ab1727423348572a11e9df5d to before 3f83c4cf1b78331c23876977aa7b9151aff2f9e1Affected
  • 6dedbd1d544389d6ab1727423348572a11e9df5d to before fa220c05d282e7479abe08b54e3bdffd06c25e97Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.