CVE-2022-50246 Details
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() I got the following report while doing device(mt6370-tcpc) load test with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay node /i2c/pmic@34/tcpc/connector The 'fwnode' set in tcpci_parse_config() which is called in tcpci_register_port(), its node refcount is increased in device_get_named_child_node(). It needs be put while exiting, so call fwnode_handle_put() in the error path of tcpci_register_port() and in tcpci_unregister_port() to avoid leak.
A node reference count leak vulnerability has been identified in the USB Type-C TCPCI port management of the Linux kernel. This issue occurs in the 'tcpci_register_port()' function, where the reference count of a node is improperly managed, leading to a memory leak. The vulnerability was discovered during a load test of the 'mt6370-tcpc' device, with specific configuration options enabled. The problem arises because the 'fwnode' reference, which is increased when a child node is accessed, is not properly released before the function exits. As a result, the reference count becomes unbalanced, causing a memory leak.
The vulnerability has been addressed in the Linux kernel by modifying the 'tcpci_register_port()' and 'tcpci_unregister_port()' functions to ensure that the 'fwnode' reference is properly released, preventing the memory leak.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0384e87e3fec735e47f1c133c796f32ef7a72a9b | kernel.org | Patch |
| https://git.kernel.org/stable/c/4f257e2eba419ab4cd880c822346450e4e7b2af3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5f125507d2270035dfcf83fbff6cff5a143e200c | kernel.org | Patch |
| https://git.kernel.org/stable/c/ba75be6f0d9d028d20852564206565a4c03e3288 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d3b6c28a71f111a6c67ddc3238aab95910fd86cf | kernel.org | Patch |
| https://git.kernel.org/stable/c/e75a324409715bd71348f79a49aa61b69dbeb676 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.19, < 5.4.229 >= 5.5, < 5.10.163 >= 5.11, < 5.15.86 >= 5.16, < 6.0.16 >= 6.1, < 6.1.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 24, 2025 | Initial Analysis | [email protected] |
| Sep 15, 2025 | New CVE Received | kernel.org |