Strix
26.1K

CVE-2022-50641

UnknownEPSS 0.20%

Last modified

CVE-2022-50641 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node to possibly release the node.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node to possibly release the node.

Metrics

EPSS Probability
0.20%

9.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b209e047bc743247f74ce79e8827ae1ed556bae0, < 20fbaff6699ea5553c67550e867d6f90b7085447; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < 18e199a5541aad6dc5cf51bc3f712247b2d17894; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < e8a218c17d7c5c42d5609ef92d339b47f3d11d02; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < aa9c0598b10960ad1198044da1e277a89b4e3af6; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < 962f22e7f7698f7718d95bd9b63e41fb8cca01a9; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < 691f23a8475f04c988f7e98066b084e996b40fa0; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < e25f56f8bdf66126a54b5a88bc021c82bfb50b75; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < 0eff9ef67d91e350d2047c3e13b6c3b7d0c90bf4; >= b209e047bc743247f74ce79e8827ae1ed556bae0, < 9a2ea132df860177b33c9fd421b26c4e9a0a9396
LinuxLinux3.16

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2022-50641?
In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node to possibly release the node.
How severe is CVE-2022-50641?
Severity scoring for CVE-2022-50641 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50641?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-50641?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST