linux-cve-announce - CVE-2022-50019: tty: serial: Fix refcount leak bug in ucc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2025061834-CVE-2022-50019-181a@gregkh>
Date: Wed, 18 Jun 2025 13:01:24 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-cve-announce@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...nel.org>
Subject: CVE-2022-50019: tty: serial: Fix refcount leak bug in ucc_uart.c

From: Greg Kroah-Hartman <gregkh@...nel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: Fix refcount leak bug in ucc_uart.c

In soc_info(), of_find_node_by_type() will return a node pointer
with refcount incremented. We should use of_node_put() when it is
not used anymore.

The Linux kernel CVE team has assigned CVE-2022-50019 to this issue.


Affected and fixed versions
===========================

	Fixed in 4.9.326 with commit 8245e7d1d7f75a9255ad1e8146752e5051d528b8
	Fixed in 4.14.291 with commit ec56f886f3bf0f15f7a3844d4c025e165b8e8de7
	Fixed in 4.19.256 with commit 59bc4c19d53bdac61ec952c01c6e864f5f0f8367
	Fixed in 5.4.211 with commit ca3fc1c38e4253bc019881301a28ea60b8b0bca3
	Fixed in 5.10.138 with commit 81939c4fbc2d5c754d0f1c1f05149d4b70d751ed
	Fixed in 5.15.63 with commit 17c32546166d8a7d2579c4b57c8b16241f94a66b
	Fixed in 5.19.4 with commit f6ed634eedb1a8a6a8cb110a7695c7abb70ffcbf
	Fixed in 6.0 with commit d24d7bb2cd947676f9b71fb944d045e09b8b282f

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2022-50019
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/tty/serial/ucc_uart.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/8245e7d1d7f75a9255ad1e8146752e5051d528b8
	https://git.kernel.org/stable/c/ec56f886f3bf0f15f7a3844d4c025e165b8e8de7
	https://git.kernel.org/stable/c/59bc4c19d53bdac61ec952c01c6e864f5f0f8367
	https://git.kernel.org/stable/c/ca3fc1c38e4253bc019881301a28ea60b8b0bca3
	https://git.kernel.org/stable/c/81939c4fbc2d5c754d0f1c1f05149d4b70d751ed
	https://git.kernel.org/stable/c/17c32546166d8a7d2579c4b57c8b16241f94a66b
	https://git.kernel.org/stable/c/f6ed634eedb1a8a6a8cb110a7695c7abb70ffcbf
	https://git.kernel.org/stable/c/d24d7bb2cd947676f9b71fb944d045e09b8b282f