CVE-2022-50155

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-50155
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50155.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50155
Downstream
Related
Published
2025-06-18T11:03:13Z
Modified
2025-10-14T00:42:55.998095Z
Summary
mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset
Details

In the Linux kernel, the following vulnerability has been resolved:

mtd: parsers: ofpart: Fix refcount leak in bcm4908partitionsfw_offset

offindnodebypath() returns a node pointer with refcount incremented, we should use ofnodeput() on it when not need anymore. Add missing ofnodeput() to avoid refcount leak.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb17230c61a6424b622e92006ec52ba23aa5a967
Fixed
762475464982b15014f364ec0cf2a843407f5af1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb17230c61a6424b622e92006ec52ba23aa5a967
Fixed
3193c3a3f4fca65cb06d9d48d07fb96bc1f5b2bd
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb17230c61a6424b622e92006ec52ba23aa5a967
Fixed
01bc3840d943cf725dea6ca13e11ffda82bad49a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb17230c61a6424b622e92006ec52ba23aa5a967
Fixed
e607879b0da18c451de5e91daf239cc2f2f8ff2d

Affected versions

v5.*

v5.12
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.10
v5.18.11
v5.18.12
v5.18.13
v5.18.14
v5.18.15
v5.18.16
v5.18.17
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.19.1

Database specific 

{
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c"
            },
            "id": "CVE-2022-50155-126276af",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "30235300014676466064866241609218677440",
                    "138570704064358559040412966341290067341",
                    "164892179669021525717959587681268426837",
                    "70570648942659701630528411314542082475",
                    "249427734794769296406182766197517636083",
                    "299273795363371875504254446125935008973",
                    "150483075874421853212242370992082442271",
                    "87525674895685643704461793028514992696"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01bc3840d943cf725dea6ca13e11ffda82bad49a",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c"
            },
            "id": "CVE-2022-50155-346cad1b",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "30235300014676466064866241609218677440",
                    "138570704064358559040412966341290067341",
                    "164892179669021525717959587681268426837",
                    "70570648942659701630528411314542082475",
                    "249427734794769296406182766197517636083",
                    "299273795363371875504254446125935008973",
                    "150483075874421853212242370992082442271",
                    "87525674895685643704461793028514992696"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@762475464982b15014f364ec0cf2a843407f5af1",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c",
                "function": "bcm4908_partitions_fw_offset"
            },
            "id": "CVE-2022-50155-3ad56060",
            "digest": {
                "length": 537.0,
                "function_hash": "179454105896319353382176849670903864394"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01bc3840d943cf725dea6ca13e11ffda82bad49a",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c"
            },
            "id": "CVE-2022-50155-55176579",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "30235300014676466064866241609218677440",
                    "138570704064358559040412966341290067341",
                    "164892179669021525717959587681268426837",
                    "70570648942659701630528411314542082475",
                    "249427734794769296406182766197517636083",
                    "299273795363371875504254446125935008973",
                    "150483075874421853212242370992082442271",
                    "87525674895685643704461793028514992696"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e607879b0da18c451de5e91daf239cc2f2f8ff2d",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c",
                "function": "bcm4908_partitions_fw_offset"
            },
            "id": "CVE-2022-50155-a65c6029",
            "digest": {
                "length": 537.0,
                "function_hash": "179454105896319353382176849670903864394"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@762475464982b15014f364ec0cf2a843407f5af1",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c",
                "function": "bcm4908_partitions_fw_offset"
            },
            "id": "CVE-2022-50155-b060805a",
            "digest": {
                "length": 537.0,
                "function_hash": "179454105896319353382176849670903864394"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e607879b0da18c451de5e91daf239cc2f2f8ff2d",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c",
                "function": "bcm4908_partitions_fw_offset"
            },
            "id": "CVE-2022-50155-c88d2a1c",
            "digest": {
                "length": 537.0,
                "function_hash": "179454105896319353382176849670903864394"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3193c3a3f4fca65cb06d9d48d07fb96bc1f5b2bd",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/mtd/parsers/ofpart_bcm4908.c"
            },
            "id": "CVE-2022-50155-d26b4116",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "30235300014676466064866241609218677440",
                    "138570704064358559040412966341290067341",
                    "164892179669021525717959587681268426837",
                    "70570648942659701630528411314542082475",
                    "249427734794769296406182766197517636083",
                    "299273795363371875504254446125935008973",
                    "150483075874421853212242370992082442271",
                    "87525674895685643704461793028514992696"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3193c3a3f4fca65cb06d9d48d07fb96bc1f5b2bd",
            "signature_version": "v1"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.61
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2