ghsa-48rc-gf37-67xr
Vulnerability from github
Published
2025-09-15 15:31
Modified
2025-09-15 15:31
VLAI Severity ?
Details
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
I got the following report while doing device(mt6370-tcpc) load test with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled:
OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay node /i2c/pmic@34/tcpc/connector
The 'fwnode' set in tcpci_parse_config() which is called in tcpci_register_port(), its node refcount is increased in device_get_named_child_node(). It needs be put while exiting, so call fwnode_handle_put() in the error path of tcpci_register_port() and in tcpci_unregister_port() to avoid leak.
{
"affected": [],
"aliases": [
"CVE-2022-50246"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-09-15T14:15:35Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpci: fix of node refcount leak in tcpci_register_port()\n\nI got the following report while doing device(mt6370-tcpc) load\ntest with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled:\n\n OF: ERROR: memory leak, expected refcount 1 instead of 2,\n of_node_get()/of_node_put() unbalanced - destroy cset entry:\n attach overlay node /i2c/pmic@34/tcpc/connector\n\nThe \u0027fwnode\u0027 set in tcpci_parse_config() which is called\nin tcpci_register_port(), its node refcount is increased\nin device_get_named_child_node(). It needs be put while\nexiting, so call fwnode_handle_put() in the error path of\ntcpci_register_port() and in tcpci_unregister_port() to\navoid leak.",
"id": "GHSA-48rc-gf37-67xr",
"modified": "2025-09-15T15:31:22Z",
"published": "2025-09-15T15:31:22Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50246"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0384e87e3fec735e47f1c133c796f32ef7a72a9b"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4f257e2eba419ab4cd880c822346450e4e7b2af3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/5f125507d2270035dfcf83fbff6cff5a143e200c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ba75be6f0d9d028d20852564206565a4c03e3288"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d3b6c28a71f111a6c67ddc3238aab95910fd86cf"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e75a324409715bd71348f79a49aa61b69dbeb676"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…