CVE-2022-50249

memory: of: Fix refcount leak bug in of_get_ddr_timings()

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

memory: of: Fix refcount leak bug in of_get_ddr_timings()

We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease the refcount.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6b42eb6a66c188642aeb447312938c6f6ebee86 to before a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 68c9c4e6495b825be3a8946df1a0148399555fe4Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 85a40bfb8e7a170abcf9dae2c0898a1983e48daaAffected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 2680690f9ce4e6abbb4f559e97271c15b7eeda97Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 62ccab6e3376f8a22167c3b81468ae4f3e7d25f1Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 1c6cac6fa4d08aea161f83d38117d733b3c3a000Affected e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 05215fb32010d4afb68fbdbb4d237df6e2d4567bAffected
LinuxLinux	3.7Affected before 3.7Not affected 4.9.331 through 4.9.Not affected 4.14.296 through 4.14.Not affected 4.19.262 through 4.19.Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

e6b42eb6a66c188642aeb447312938c6f6ebee86 to before a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 68c9c4e6495b825be3a8946df1a0148399555fe4Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 85a40bfb8e7a170abcf9dae2c0898a1983e48daaAffected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 2680690f9ce4e6abbb4f559e97271c15b7eeda97Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 62ccab6e3376f8a22167c3b81468ae4f3e7d25f1Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 1c6cac6fa4d08aea161f83d38117d733b3c3a000Affected
e6b42eb6a66c188642aeb447312938c6f6ebee86 to before 05215fb32010d4afb68fbdbb4d237df6e2d4567bAffected

LinuxLinux

3.7Affected
before 3.7Not affected
4.9.331 through 4.9.*Not affected
4.14.296 through 4.14.*Not affected
4.19.262 through 4.19.*Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.