CVE-2022-50109: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: amba-clcd: Fix refcount leak bugs In clcdfb_of_init_display(), we should call of_node_put() for the references returned by of_graph_get_next_endpoint() and of_graph_get_remote_port_parent() which have increased the refcount. Besides, we should call of_node_put() both in fail path or when the references are not used anymore.

Is your site exposed to CVE-2022-50109?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
linux	linux_kernel	3.17 — 4.14.291
linux	linux_kernel	4.15 — 4.19.256
linux	linux_kernel	4.20 — 5.4.211
linux	linux_kernel	5.5 — 5.10.137
linux	linux_kernel	5.11 — 5.15.61
linux	linux_kernel	5.16 — 5.18.18
linux	linux_kernel	5.19 — 5.19.2

References

Advisories & Patches

https://git.kernel.org/stable/c/2688df86c02da6bdc9866b62d974e169a2678883 https://git.kernel.org/stable/c/26c2b7d9fac42eb8317f3ceefa4c1a9a9170ca69 https://git.kernel.org/stable/c/29f06f1905c312671a09ee85ca92ac04a1d9f305 https://git.kernel.org/stable/c/49a4c1a87ef884e43cdda58b142a2a30f2f09efc https://git.kernel.org/stable/c/a51519ebd0fdad3546463018b8f6bc3b0f4d3032 https://git.kernel.org/stable/c/a88ab277cca99aeb9a3b2b7db358f1a6dd528b0c https://git.kernel.org/stable/c/a97ff8a949dbf41be89f436b2b1a2b3d794493df https://git.kernel.org/stable/c/da276dc288bf838ea0fd778b5441ec0f601c69f7

Frequently Asked Questions

What is CVE-2022-50109? +

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: amba-clcd: Fix refcount leak bugs In clcdfb_of_init_display(), we should call of_node_put() for the references returned by of_graph_get_next_endpoint() and of_graph_get_remote_port_parent() which have increased the refcount. Besides, we should call of_node_put() both in fail path or when the references are not used anymore. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2022-50109? +

CVE-2022-50109 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2022-50109? +

CVE-2022-50109 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2022-50109? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-9588 10.0

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. …

CVE-2025-57870 10.0

A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This …

CVE-2026-48286 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2026-13782 10.0

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer …

CVE-2026-48303 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2025-34028 10.0

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when …

CVE-2022-50109