PT-2025-40667 · Linux+1 · Linux Kernel+1

Published 2022-08-16 · Updated 2025-12-04 · CVE-2022-50480

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the pl353 smc probe() function due to a missing call to of node put() within the for each available child of node() loop when the 'child' reference is not used. This occurs in the failure path where there is no break, leading to a reference count leak. The of platform device create() function creates a new reference, but this does not address the initial leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

CWE-664

Related Identifiers

BDU:2026-03843

CVE-2022-50480

SUSE-SU-2025:4111-1

SUSE-SU-2025:4135-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4188-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 475

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50480.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-50480 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03843 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4135-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50480 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50480 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://git.kernel.org/stable/c/44db35ceb94756ba513dcf6b69bf9e949b28469c · Patch
• https://git.kernel.org/stable/c/566b143aa5112a0c2784e20603778518bb799537 · Patch
• https://git.kernel.org/stable/c/fde46754d5483bc398018bbec3c8ef5c55219e67 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50480 · Security Note
• https://git.kernel.org/stable/c/49605dc25e7fb33bf8b671279d4468531da90f89 · Patch
• https://git.kernel.org/stable/c/b37f4a711e5d4bf3608ccbc6de82b52e92b441a0 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50480 · Security Note