CVE-2022-50141

mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() checks null pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820Affected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 547db1dd98d1815574ebea7358015a17199a93bcAffected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 4c472a2c9ed6ea9d272268d7f484d4303c549f1aAffected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b305475df756256a186623f0991d05a816de881aAffected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 352377cf74710bc3368dddf78f17210dfe456933Affected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b074f1e8060836baeb0ee91181f4194b9a0ee16aAffected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 8b902840f6a3584f702bcb59834691b30f3d7c5aAffected ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b5899a3e2f783a27b268e38d37f9b24c71bddf45Affected
LinuxLinux	4.12Affected before 4.12Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820Affected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 547db1dd98d1815574ebea7358015a17199a93bcAffected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 4c472a2c9ed6ea9d272268d7f484d4303c549f1aAffected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b305475df756256a186623f0991d05a816de881aAffected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 352377cf74710bc3368dddf78f17210dfe456933Affected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b074f1e8060836baeb0ee91181f4194b9a0ee16aAffected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before 8b902840f6a3584f702bcb59834691b30f3d7c5aAffected
ea35645a3c66a74af92d3bbb4eb131220fc3e58a to before b5899a3e2f783a27b268e38d37f9b24c71bddf45Affected

LinuxLinux

4.12Affected
before 4.12Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.