Not yet scoredPublished Dec 24, 2025

CVE-2022-50777net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe

Updated under an hour ago (Oct 27, 2026, 10:20 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3f7056e1822d648f8022997497edc6cad2ad1e73 before 53526dbc8aa6b95e9fc2ab1e29b1a9145721da24; from ab4e6ee578e88a659938db8fbf33720bc048d29c before 78b0b1ff525d9be4babf5a148a4de0d50042d95d; from ab4e6ee578e88a659938db8fbf33720bc048d29c before 00616bd1913a4f879679e02dc08c2f501ca2bd4c; from ab4e6ee578e88a659938db8fbf33720bc048d29c before 106d0d33c9d1ec4ddeeffc1fdc717ff09953d4ed; from ab4e6ee578e88a659938db8fbf33720bc048d29c before 4d112f001612c79927c1ecf29522b34c4fa292e0; from ab4e6ee578e88a659938db8fbf33720bc048d29c before 52841e71253e6ace72751c72560950474a57d04c; from ab4e6ee578e88a659938db8fbf33720bc048d29c before ee84d37a5f08ed1121cdd16f8f3ed87552087a21; from ab4e6ee578e88a659938db8fbf33720bc048d29c before d039535850ee47079d59527e96be18d8e0daa84b; and 5 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/53526dbc8aa6b95e9fc2ab1e29b1a9145721da24
https://git.kernel.org/stable/c/78b0b1ff525d9be4babf5a148a4de0d50042d95d
https://git.kernel.org/stable/c/00616bd1913a4f879679e02dc08c2f501ca2bd4c
https://git.kernel.org/stable/c/106d0d33c9d1ec4ddeeffc1fdc717ff09953d4ed
https://git.kernel.org/stable/c/4d112f001612c79927c1ecf29522b34c4fa292e0
https://git.kernel.org/stable/c/52841e71253e6ace72751c72560950474a57d04c
https://git.kernel.org/stable/c/ee84d37a5f08ed1121cdd16f8f3ed87552087a21
https://git.kernel.org/stable/c/d039535850ee47079d59527e96be18d8e0daa84b

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.