CVE-2022-50158: mtd: partitions: Fix refcount leak in parse_redboot_of
In the Linux kernel, the following vulnerability has been resolved:
mtd: partitions: Fix refcount leak in parseredbootof
ofgetchildbyname() returns a node pointer with refcount incremented, we should use ofnodeput() on it when not need anymore. Add missing ofnodeput() to avoid refcount leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50158?
The severity of CVE-2022-50158 is considered moderate due to the risk of refcount leaks which could lead to denial of service under certain conditions.
How do I fix CVE-2022-50158?
To remediate CVE-2022-50158, you should update your Linux kernel to a version that includes the fix for this vulnerability.
Which Linux kernel versions are affected by CVE-2022-50158?
CVE-2022-50158 affects multiple versions of the Linux kernel ranging from 5.4.132 to 5.4.211, 5.10.50 to 5.10.137, and similar ranges for other versions.
What type of vulnerability is CVE-2022-50158?
CVE-2022-50158 is a programming error related to reference counting in the Linux kernel that can potentially lead to resource leaks.
Is CVE-2022-50158 exploitable?
CVE-2022-50158 is not known to be actively exploited in the wild, but it can still pose a risk under specific circumstances.