Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2022-50176— drm/mcde: Fix refcount leak in mcde_dsi_bind

AI Predicted 5.5 Difficulty: Easy EPSS 0.21% · P11

Possible ATT&CK Techniques 1AI

T1211 · Exploitation for Stealth

Affected Version Matrix 14

VendorProductVersion RangeStatus
LinuxLinux5fc537bfd00033a3f813330175f7f12c25957ebf< 87c35bbefdfa3c5edfb8c80f5c04717aaacc629daffected
5fc537bfd00033a3f813330175f7f12c25957ebf< f57699a9b66ea11f000f56d1f1179059239b8690affected
5fc537bfd00033a3f813330175f7f12c25957ebf< 3123ae6fdd4013d24a3a4877084b14e917faae5caffected
5fc537bfd00033a3f813330175f7f12c25957ebf< 7214902de5b1fb2b632a7b8b3b9540e41aabab38affected
5fc537bfd00033a3f813330175f7f12c25957ebf< 32c827e30bb44ae809950a9efab59e98e44d30e5affected
5fc537bfd00033a3f813330175f7f12c25957ebf< 3a149169e4a2f9127022fec6ef5d71b4e804b3b9affected
5.3affected
< 5.3unaffected
… +6 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50176

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/mcde: Fix refcount leak in mcde_dsi_bind
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcde_dsi_bind Every iteration of for_each_available_child_of_node() decrements the reference counter of the previous node. There is no decrement when break out from the loop and results in refcount leak. Add missing of_node_put() to fix this.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于mcde_dsi_bind函数中refcount泄漏问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 5fc537bfd00033a3f813330175f7f12c25957ebf ~ 87c35bbefdfa3c5edfb8c80f5c04717aaacc629d -
LinuxLinux 5.3 -

II. Public POCs for CVE-2022-50176

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50176

登录查看更多情报信息。

Same Patch Batch · Linux · 2025-06-18 · 362 CVEs total

CVE-2025-380759.8 CRITICALscsi: target: iscsi: Fix timeout on deleted connection
CVE-2022-500988.8 HIGHscsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
CVE-2025-380528.8 HIGHnet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
CVE-2022-499348.8 HIGHwifi: mac80211: Fix UAF in ieee80211_scan_rx()
CVE-2022-501648.8 HIGHwifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
CVE-2025-380168.8 HIGHHID: bpf: abort dispatch if device destroyed
CVE-2025-380748.8 HIGHvhost-scsi: protect vq->log_used with vq->mutex
CVE-2022-499748.8 HIGHHID: nintendo: fix rumble worker null pointer deref
CVE-2022-499688.0 HIGHieee802154/adf7242: defer destroy_workqueue call
CVE-2022-499447.8 HIGHRevert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"
CVE-2022-499507.8 HIGHmisc: fastrpc: fix memory corruption on open
CVE-2022-499397.8 HIGHbinder: fix UAF of ref->proc caused by race condition
CVE-2022-500287.8 HIGHgadgetfs: ep_io - wait until IRQ finishes
CVE-2022-499357.8 HIGHdma-buf/dma-resv: check if the new fence is really later
CVE-2025-380827.8 HIGHgpio: virtuser: fix potential out-of-bound write
CVE-2022-501827.8 HIGHmedia: imx-jpeg: Align upwards buffer size
CVE-2025-380807.8 HIGHdrm/amd/display: Increase block_sequence array size
CVE-2025-380607.8 HIGHbpf: copy_verifier_state() should copy 'loop_entry' field
CVE-2022-501017.8 HIGHvideo: fbdev: vt8623fb: Check the size of screen before memset_io()
CVE-2025-380627.8 HIGHgenirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie

Showing top 20 of 362 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2022-50176

No comments yet


Leave a comment