Not yet scoredPublished Dec 24, 2025

CVE-2022-50703soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()

Updated under an hour ago (Oct 27, 2026, 1:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c97c4090ff72297a878a37715bd301624b71c885 before 1bbe75d466e5118b7d49ef4a346c3ce5742da4e8; from c97c4090ff72297a878a37715bd301624b71c885 before bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43; from c97c4090ff72297a878a37715bd301624b71c885 before 42df28994eba7b56c762f7bbe7efd5611a1cd15b; from c97c4090ff72297a878a37715bd301624b71c885 before 1e3ed59370c712df436791efed120f0c082aa9bc; from c97c4090ff72297a878a37715bd301624b71c885 before 39781c98ad46b4e85053345dff797240c1ed7935; from c97c4090ff72297a878a37715bd301624b71c885 before 96e0028debdd07a6d582f0dfadf9a3ec2b5fffff; from c97c4090ff72297a878a37715bd301624b71c885 before 8fb6112bd49c0e49f2cf51604231d85ff00284bb; from c97c4090ff72297a878a37715bd301624b71c885 before ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/1bbe75d466e5118b7d49ef4a346c3ce5742da4e8
https://git.kernel.org/stable/c/bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43
https://git.kernel.org/stable/c/42df28994eba7b56c762f7bbe7efd5611a1cd15b
https://git.kernel.org/stable/c/1e3ed59370c712df436791efed120f0c082aa9bc
https://git.kernel.org/stable/c/39781c98ad46b4e85053345dff797240c1ed7935
https://git.kernel.org/stable/c/96e0028debdd07a6d582f0dfadf9a3ec2b5fffff
https://git.kernel.org/stable/c/8fb6112bd49c0e49f2cf51604231d85ff00284bb
https://git.kernel.org/stable/c/ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d
https://git.kernel.org/stable/c/af8f6f39b8afd772fda4f8e61823ef8c021bf382

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.