CVE-2022-50157: PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains()
In the Linux kernel, the following vulnerability has been resolved:
PCI: microchip: Fix refcount leak in mcpcieinitirqdomains()
ofgetnextchild() returns a node pointer with refcount incremented, so we should use ofnodeput() on it when we don't need it anymore.
mcpcieinitirqdomains() only calls ofnodeput() in the normal path, missing it in some error paths. Add missing ofnodeput() to avoid refcount leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50157?
CVE-2022-50157 has been classified as a medium severity vulnerability.
How do I fix CVE-2022-50157?
To address CVE-2022-50157, update the Linux kernel to a patched version that resolves the refcount leak in mc_pcie_init_irq_domains().
What vulnerabilities are related to CVE-2022-50157?
CVE-2022-50157 is specifically related to a refcount leak in the PCI subsystem of the Linux kernel.
What systems are affected by CVE-2022-50157?
CVE-2022-50157 affects systems running vulnerable versions of the Linux kernel utilizing the PCI interface.
Can CVE-2022-50157 be exploited remotely?
CVE-2022-50157 does not have known specific remote exploitation vectors, but it could affect local privilege escalation.