PT-2025-38340 · Mediatek+4 · Mediatek Mt8183+4

Published 2022-12-07 · Updated 2026-03-14 · CVE-2022-50392

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak was identified in the mt8183 mt6358 ts3a227 max98357 dev probe() function within the ASoC (ALSA on System-on-Chip) subsystem for MediaTek mt8183 platforms. The issue occurs because the node returned by of parse phandle() has its reference count incremented, but of node put() is not called in the error path of the function, leading to a resource leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-05979

CVE-2022-50392

RHSA-2023:2458

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Debian

Linux Kernel

Mediatek Mt8183

Suse

References · 865

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50392.json · Exploit
• https://git.kernel.org/stable/c/156b0c19c1a44153e34cfdfa5937546a93dcb288 · Patch
• https://git.kernel.org/stable/c/82f7c814edda353b4781f356d3ab90e943d5eac4 · Patch
• https://bdu.fstec.ru/vul/2026-05979 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50392 · Security Note
• https://git.kernel.org/stable/c/574bd4d14a9297a1c69ad41001caf00fdd17d305 · Patch
• https://osv.dev/vulnerability/CVE-2022-50392 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50392 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50392 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50392 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50392 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory