CVE-2022-50139

MEDIUM EPSS 5.0%

Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Jun 18, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() We should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

5.0% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Affected Products 4

Vendor	Product	Version	Range
linux	linux_kernel	*	≥5.8 – <5.10.137
linux	linux_kernel	*	≥5.11 – <5.15.61
linux	linux_kernel	*	≥5.16 – <5.18.18
linux	linux_kernel	*	≥5.19 – <5.19.2

References 5

git.kernel.org https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a

Patch
git.kernel.org https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c

Patch
git.kernel.org https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf

Patch
git.kernel.org https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a

Patch
git.kernel.org https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a

Patch
git.kernel.org https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c

Patch
git.kernel.org https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf

Patch
git.kernel.org https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a

Patch
git.kernel.org https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213

Patch