Riskcovery

CVE-2022-50139

usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

We should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 30d2617fd7ed052c30d1c21ddd4af4703d922be8 to before e6db5780c2bf6e23be7b315809ef349b4b4f2213Affected
  • 30d2617fd7ed052c30d1c21ddd4af4703d922be8 to before 4070f3c83cd28267f469a59751480ad39435f26aAffected
  • 30d2617fd7ed052c30d1c21ddd4af4703d922be8 to before 0e0a40c803643f4edc30f0660f2f3bea4d57a99aAffected
  • 30d2617fd7ed052c30d1c21ddd4af4703d922be8 to before 3503305225ca24c3229414c769323fb8bf39b4bfAffected
  • 30d2617fd7ed052c30d1c21ddd4af4703d922be8 to before 220fafb4ed04187e9c17be4152da5a7f2ffbdd8cAffected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.