High 7.8Published Dec 24, 2025

CVE-2022-50745staging: media: tegra-video: fix device_node use after free

Updated under an hour ago (Oct 26, 2026, 7:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix device_node use after free At probe time this code path is followed: * tegra_csi_init * tegra_csi_channels_alloc * for_each_child_of_node(node, channel) -- iterates over channels * automatically gets 'channel' * tegra_csi_channel_alloc() * saves into chan->of_node a pointer to the channel OF node * automatically gets and puts 'channel' * now the node saved in chan->of_node has refcount 0, can disappear * tegra_csi_channels_init * iterates over channels * tegra_csi_channel_init -- uses chan->of_node After that, chan->of_node keeps storing the node until the device is removed. of_node_get() the node and of_node_put() it during teardown to avoid any risk.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1ebaeb09830f36c1111b72a95420814225bd761c before 5451efb2ca30f3c42b9efb8327ce35b62870dbd3; from 1ebaeb09830f36c1111b72a95420814225bd761c before ce50c612458091d926ccb05d7db11d9f93532db2; from 1ebaeb09830f36c1111b72a95420814225bd761c before 6512c9498fcb97e7c760e3ef86b2272f2c0f765f; 1ebaeb09830f36c1111b72a95420814225bd761c builds before 0fd003d3c708c80350a815eaf37b8e1114b976cf; from 1ebaeb09830f36c1111b72a95420814225bd761c before c4d344163c3a7f90712525f931a6c016bbb35e18	CNA record

References

References

https://git.kernel.org/stable/c/5451efb2ca30f3c42b9efb8327ce35b62870dbd3
https://git.kernel.org/stable/c/ce50c612458091d926ccb05d7db11d9f93532db2
https://git.kernel.org/stable/c/6512c9498fcb97e7c760e3ef86b2272f2c0f765f
https://git.kernel.org/stable/c/0fd003d3c708c80350a815eaf37b8e1114b976cf
https://git.kernel.org/stable/c/c4d344163c3a7f90712525f931a6c016bbb35e18

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.