PT-2025-26102 · Linux+2 · Linux Kernel+2

Published 2022-06-27 · Updated 2025-11-25 · CVE-2022-50176

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the drm/mcde component, within the mcde dsi bind function. The problem arises from the for each available child of node() loop, where the reference counter of the previous node is decremented in every iteration, but not when the loop is exited, resulting in a refcount leak. This issue has been resolved by adding a missing of node put() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-06067

CVE-2022-50176

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 606

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50176.json · Exploit
• https://git.kernel.org/stable/c/3123ae6fdd4013d24a3a4877084b14e917faae5c · Patch
• https://bdu.fstec.ru/vul/2026-06067 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f57699a9b66ea11f000f56d1f1179059239b8690 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50176 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50176 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://git.kernel.org/stable/c/32c827e30bb44ae809950a9efab59e98e44d30e5 · Patch
• https://git.kernel.org/stable/c/3a149169e4a2f9127022fec6ef5d71b4e804b3b9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50176 · Vendor Advisory
• https://git.kernel.org/stable/c/87c35bbefdfa3c5edfb8c80f5c04717aaacc629d · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50176 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50176 · Security Note