UnratedFix available
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.296, 4.19.262, 4.9.331, 5.10.150, 5.15.75, 5.19.17, 5.4.220, 6.0.3
- CVEs
- CVE-2022-50703
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 08:38 UTC · Revision 1
Source evidence
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
core-osv · Original sourcePublished 24 Dec 2025, 10:55 UTC
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.
osv:CVE-2022-50703
Kernel
Fixed versions: 4.9.331, 4.14.296, 4.19.262, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3
Complete source record
{
"id": "504b5938066762bf8b2ead69984a22bf6466a4e6666bd7c5e0e4b420b83616eb",
"url": "https://osv.dev/vulnerability/CVE-2022-50703",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.",
"evidence": "osv:CVE-2022-50703",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.9.331",
"evidence": "/affected/1/ranges"
},
{
"value": "4.14.296",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.262",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.220",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.150",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.75",
"evidence": "/affected/1/ranges"
},
{
"value": "5.19.17",
"evidence": "/affected/1/ranges"
},
{
"value": "6.0.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-50703",
"aliases": [
"CVE-2022-50703"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c97c4090ff72297a878a37715bd301624b71c885"
},
{
"fixed": "1bbe75d466e5118b7d49ef4a346c3ce5742da4e8"
},
{
"fixed": "bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43"
},
{
"fixed": "42df28994eba7b56c762f7bbe7efd5611a1cd15b"
},
{
"fixed": "1e3ed59370c712df436791efed120f0c082aa9bc"
},
{
"fixed": "39781c98ad46b4e85053345dff797240c1ed7935"
},
{
"fixed": "96e0028debdd07a6d582f0dfadf9a3ec2b5fffff"
},
{
"fixed": "8fb6112bd49c0e49f2cf51604231d85ff00284bb"
},
{
"fixed": "ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d"
},
{
"fixed": "af8f6f39b8afd772fda4f8e61823ef8c021bf382"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50703.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.5.0"
},
{
"fixed": "4.9.331"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.10.0"
},
{
"fixed": "4.14.296"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.262"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.220"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.150"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.75"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.19.17"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.20.0"
},
{
"fixed": "6.0.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50703.json"
}
}
],
"modified": "2026-10-28T02:30:27.081657822Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/1bbe75d466e5118b7d49ef4a346c3ce5742da4e8",
"https://git.kernel.org/stable/c/1e3ed59370c712df436791efed120f0c082aa9bc",
"https://git.kernel.org/stable/c/39781c98ad46b4e85053345dff797240c1ed7935",
"https://git.kernel.org/stable/c/42df28994eba7b56c762f7bbe7efd5611a1cd15b",
"https://git.kernel.org/stable/c/8fb6112bd49c0e49f2cf51604231d85ff00284bb",
"https://git.kernel.org/stable/c/96e0028debdd07a6d582f0dfadf9a3ec2b5fffff",
"https://git.kernel.org/stable/c/af8f6f39b8afd772fda4f8e61823ef8c021bf382",
"https://git.kernel.org/stable/c/bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43",
"https://git.kernel.org/stable/c/ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50703.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50703",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50703.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50703",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 493909,
"published_at": "2025-12-24T10:55:18.548+00:00"
}