Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2022-50119
CVE-2022-50119:
Linux Kernel vulnerability analysis and mitigation
Overview
In the Linux kernel, a vulnerability (CVE-2022-50119) was identified related to a possible refcount leak in the rpmsg_register_device_override() function. The issue was discovered when the driver_set_override fails, where the function needs to call put_device to free vch. The vulnerability was disclosed on June 18, 2025 (NVD, Wiz).
Technical details
The vulnerability exists in the rpmsg (Remote Processor Messaging) subsystem of the Linux kernel. Specifically, the issue occurs in the rpmsg_register_device_override() function where there is a failure to properly manage device reference counts when driver_set_override fails. The fix involves adding a put_device() call to the error path to prevent the reference count leak (NVD, Wiz).
Impact
A refcount leak in the kernel can lead to resource exhaustion over time, potentially affecting system stability and performance (Wiz).
Mitigation and workarounds
The vulnerability has been fixed by adding a put_device() call to the error path in the rpmsg_register_device_override() function. Users should update their Linux kernel to a version that includes this fix (Wiz).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management