PT-2025-26046 · Linux+4 · Linux Kernel+4

Published 2022-06-22 · Updated 2026-03-14 · CVE-2022-50120

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the imx rproc addr init function. The of parse phandle() function returns a node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed. However, two paths in the function are missing the of node put() call, leading to a refcount leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-04582

CVE-2022-50120

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

Suse

References · 595

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50120.json · Exploit
• https://git.kernel.org/stable/c/16da9f84e26f89e58cac194ff19fefd9de27d975 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50120 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50120 · Vendor Advisory
• https://git.kernel.org/stable/c/0dc1663e3fc22c72e1ab33be7701a0d51cca84ef · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50120 · Vendor Advisory
• https://git.kernel.org/stable/c/61afafe8b938bc74841cf4b1a73dd08b9d287c5a · Patch
• https://osv.dev/vulnerability/CVE-2022-50120 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50120 · Security Note
• https://bdu.fstec.ru/vul/2026-04582 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50120 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50120 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50120 · Vendor Advisory