Not yet scoredPublished Dec 30, 2025

CVE-2022-50887regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()

Updated under an hour ago (Oct 27, 2026, 2:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() I got the the following report: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay node /i2c/pmic@62/regulators/exten In of_get_regulator(), the node is returned from of_parse_phandle() with refcount incremented, after using it, of_node_put() need be called.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 builds before 0e88505ac0a6ae97746bcdbd4b042ee9f20455ae; 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 builds before 4dfcf5087db9a34a300d6b99009232d4537c3e6a; 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 builds before 3ac888db0f67813d91373a9a61c840f815cd4ec9; from 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 before d39937f8de641c44a337cec4a2e5d3e8add20a7d; from 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 before f48c474efe05cf9ce5e535b5e0ddd710e963936c; from 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 before cda1895f3b7f324ece1614308a815a3994983b97; 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 builds before 2b93c58adddd98812ad928bbc2063038f3df1ffd; 69511a452e6dc6b74fe4f3671a51b1b44b9c57e3 builds before 2f98469c3141f8e42ba11075a273fb795bbad57f; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/0e88505ac0a6ae97746bcdbd4b042ee9f20455ae
https://git.kernel.org/stable/c/4dfcf5087db9a34a300d6b99009232d4537c3e6a
https://git.kernel.org/stable/c/3ac888db0f67813d91373a9a61c840f815cd4ec9
https://git.kernel.org/stable/c/d39937f8de641c44a337cec4a2e5d3e8add20a7d
https://git.kernel.org/stable/c/f48c474efe05cf9ce5e535b5e0ddd710e963936c
https://git.kernel.org/stable/c/cda1895f3b7f324ece1614308a815a3994983b97
https://git.kernel.org/stable/c/2b93c58adddd98812ad928bbc2063038f3df1ffd
https://git.kernel.org/stable/c/2f98469c3141f8e42ba11075a273fb795bbad57f
https://git.kernel.org/stable/c/f2b41b748c19962b82709d9f23c6b2b0ce9d2f91

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.