CVE-2022-50249 memory: of: Fix refcount leak bug in of_get_ddr_timings()

🗓️ 15 Sep 2025 14:02:09Reported by LinuxType

Fix refcount leak in of_get_ddr_timings by adding of_node_put() when exiting for_each_child_of_node().

Reporter	Title	Published	Views	Family All 71
AstraLinux	Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.	29 Apr 202600:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	15 Sep 202500:00	–	cnnvd
CVE	CVE-2022-50249	15 Sep 202514:02	–	cve
Debian CVE	CVE-2022-50249	15 Sep 202514:02	–	debiancve
EUVD	EUVD-2022-55503	3 Oct 202520:07	–	euvd
NVD	CVE-2022-50249	15 Sep 202514:15	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:03615-1)	20 Oct 202500:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:03626-1)	20 Oct 202500:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:03628-1)	20 Oct 202500:00	–	openvas

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/memory/of_memory.c"
    ],
    "versions": [
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "68c9c4e6495b825be3a8946df1a0148399555fe4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "85a40bfb8e7a170abcf9dae2c0898a1983e48daa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "2680690f9ce4e6abbb4f559e97271c15b7eeda97",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "62ccab6e3376f8a22167c3b81468ae4f3e7d25f1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "1c6cac6fa4d08aea161f83d38117d733b3c3a000",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6b42eb6a66c188642aeb447312938c6f6ebee86",
        "lessThan": "05215fb32010d4afb68fbdbb4d237df6e2d4567b",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/memory/of_memory.c"
    ],
    "versions": [
      {
        "version": "3.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.9.331",
        "lessThanOrEqual": "4.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.14.296",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.262",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.220",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.150",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.75",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.19.17",
        "lessThanOrEqual": "5.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.0.3",
        "lessThanOrEqual": "6.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/68c9c4e6495b825be3a8946df1a0148399555fe4
git	www.git.kernel.org/stable/c/05215fb32010d4afb68fbdbb4d237df6e2d4567b
git	www.git.kernel.org/stable/c/a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3
git	www.git.kernel.org/stable/c/62ccab6e3376f8a22167c3b81468ae4f3e7d25f1
git	www.git.kernel.org/stable/c/85a40bfb8e7a170abcf9dae2c0898a1983e48daa
git	www.git.kernel.org/stable/c/1c6cac6fa4d08aea161f83d38117d733b3c3a000
git	www.git.kernel.org/stable/c/daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9
git	www.git.kernel.org/stable/c/2680690f9ce4e6abbb4f559e97271c15b7eeda97
git	www.git.kernel.org/stable/c/a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48

11 May 2026 19:15Current

EPSS0.00149