CVE-2022-50161

mtd: maps: Fix refcount leak in of_flash_probe_versatile

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: maps: Fix refcount leak in of_flash_probe_versatile

of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 3c8de6a838b7e0eb392754ac89dd66e698684342Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 79e57889aa0d92a6d769bad808fb105e7b6ea495Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 9124d51e01232a91da4034768a2a8d1688472179Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 52ae2b14f76ef2d490337ddc0037bc37125be7b8Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 4d67c8f74d804b20febf716ec96e9a475457ec60Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbceAffected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before f516fbb63873ee23cba5b7c3d239677c30f13df8Affected b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 33ec82a6d2b119938f26e5c8040ed5d92378eb54Affected
LinuxLinux	4.7Affected before 4.7Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 3c8de6a838b7e0eb392754ac89dd66e698684342Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 79e57889aa0d92a6d769bad808fb105e7b6ea495Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 9124d51e01232a91da4034768a2a8d1688472179Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 52ae2b14f76ef2d490337ddc0037bc37125be7b8Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 4d67c8f74d804b20febf716ec96e9a475457ec60Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 5d5ddd8771fa9cabeb247fba5f6ab60d63f3fbceAffected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before f516fbb63873ee23cba5b7c3d239677c30f13df8Affected
b0afd44bc192ff4c0e90a5fc1724350bcfc32b33 to before 33ec82a6d2b119938f26e5c8040ed5d92378eb54Affected

LinuxLinux

4.7Affected
before 4.7Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.