Not yet scoredPublished Oct 22, 2025

CVE-2022-50572ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

Updated under an hour ago (Oct 28, 2026, 8:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() The of_get_next_child() returns a node with refcount incremented, and decrements the refcount of prev. So in the error path of the while loop, of_node_put() needs be called for cpu_ep.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from fce9b90c1ab7e915553c57353355700c79b39c86 before ed1376f771404917c2ec3ebc617431ec01146134; from fce9b90c1ab7e915553c57353355700c79b39c86 before 06c9d468c06806dab752eb8e72addbf3792c1023; from fce9b90c1ab7e915553c57353355700c79b39c86 before 85eb5c952b7fe2d2059beaa4a4dd26688b25547b; from fce9b90c1ab7e915553c57353355700c79b39c86 before 49dad92af6892f46851af989ef3aa7cd7316c389; from fce9b90c1ab7e915553c57353355700c79b39c86 before 4cc8431ec77a43ea106d8bde0860c61cfdda1cd0; from fce9b90c1ab7e915553c57353355700c79b39c86 before 8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0	CNA record

References

References

https://git.kernel.org/stable/c/ed1376f771404917c2ec3ebc617431ec01146134
https://git.kernel.org/stable/c/06c9d468c06806dab752eb8e72addbf3792c1023
https://git.kernel.org/stable/c/85eb5c952b7fe2d2059beaa4a4dd26688b25547b
https://git.kernel.org/stable/c/49dad92af6892f46851af989ef3aa7cd7316c389
https://git.kernel.org/stable/c/4cc8431ec77a43ea106d8bde0860c61cfdda1cd0
https://git.kernel.org/stable/c/8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.