CVE-2022-50641 - Vulnerability Details

- HSI: omap_ssi: Fix refcount leak in ssi_probe

Description

In the Linux kernel, the following vulnerability has been resolved:

HSI: omap_ssi: Fix refcount leak in ssi_probe

When returning or breaking early from a
for_each_available_child_of_node() loop, we need to explicitly call
of_node_put() on the child node to possibly release the node.

Published: 2025-12-09

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 20fbaff6699ea5553c67550e867d6f90b7085447
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 18e199a5541aad6dc5cf51bc3f712247b2d17894
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< e8a218c17d7c5c42d5609ef92d339b47f3d11d02
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< aa9c0598b10960ad1198044da1e277a89b4e3af6
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 962f22e7f7698f7718d95bd9b63e41fb8cca01a9
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 691f23a8475f04c988f7e98066b084e996b40fa0
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< e25f56f8bdf66126a54b5a88bc021c82bfb50b75
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 0eff9ef67d91e350d2047c3e13b6c3b7d0c90bf4
`b209e047bc743247f74ce79e8827ae1ed556bae0`	affected	< 9a2ea132df860177b33c9fd421b26c4e9a0a9396

Linux

affected

Version	Status	Constraints
`3.16`	affected	—
`0`	unaffected	< 3.16
`4.9.331`	unaffected	≤ 4.9.*
`4.14.296`	unaffected	≤ 4.14.*
`4.19.262`	unaffected	≤ 4.19.*
`5.4.220`	unaffected	≤ 5.4.*
`5.10.150`	unaffected	≤ 5.10.*
`5.15.75`	unaffected	≤ 5.15.*
`5.19.17`	unaffected	≤ 5.19.*
`6.0.3`	unaffected	≤ 6.0.*
`6.1`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0004.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0eff9ef67d91e350d2047c3e13b6c3b7d0c90bf4
https://git.kernel.org/stable/c/18e199a5541aad6dc5cf51bc3f712247b2d17894
https://git.kernel.org/stable/c/20fbaff6699ea5553c67550e867d6f90b7085447
https://git.kernel.org/stable/c/691f23a8475f04c988f7e98066b084e996b40fa0
https://git.kernel.org/stable/c/962f22e7f7698f7718d95bd9b63e41fb8cca01a9
https://git.kernel.org/stable/c/9a2ea132df860177b33c9fd421b26c4e9a0a9396
https://git.kernel.org/stable/c/aa9c0598b10960ad1198044da1e277a89b4e3af6
https://git.kernel.org/stable/c/e25f56f8bdf66126a54b5a88bc021c82bfb50b75
https://git.kernel.org/stable/c/e8a218c17d7c5c42d5609ef92d339b47f3d11d02
https://lore.kernel.org/linux-cve-announce/2025120936-CVE-2022-50641-edfb@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50641
https://www.cve.org/CVERecord?id=CVE-2022-50641

History

Wed, 10 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025120936-CVE-2022-50641-edfb@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50641 https://www.cve.org/CVERecord?id=CVE-2022-50641
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Tue, 09 Dec 2025 00:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node to possibly release the node.
Title		HSI: omap_ssi: Fix refcount leak in ssi_probe
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0eff9ef67d91e350d2047c3e13b6c3b7d0c90bf4 https://git.kernel.org/stable/c/18e199a5541aad6dc5cf51bc3f712247b2d17894 https://git.kernel.org/stable/c/20fbaff6699ea5553c67550e867d6f90b7085447 https://git.kernel.org/stable/c/691f23a8475f04c988f7e98066b084e996b40fa0 https://git.kernel.org/stable/c/962f22e7f7698f7718d95bd9b63e41fb8cca01a9 https://git.kernel.org/stable/c/9a2ea132df860177b33c9fd421b26c4e9a0a9396 https://git.kernel.org/stable/c/aa9c0598b10960ad1198044da1e277a89b4e3af6 https://git.kernel.org/stable/c/e25f56f8bdf66126a54b5a88bc021c82bfb50b75 https://git.kernel.org/stable/c/e8a218c17d7c5c42d5609ef92d339b47f3d11d02

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-09T00:00:15.268Z

Updated: 2026-05-11T19:22:46.571Z

Reserved: 2025-12-08T23:57:43.370Z

Link: CVE-2022-50641

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-09T01:16:46.553

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50641

Redhat

Severity : Moderate

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2022-50641 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object