CVE-2022-50152: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50152 is a vulnerability discovered in the Linux kernel, specifically in the USB OHCI driver for NXP platforms. The issue was disclosed on June 18, 2025, and affects the ohci-hcd-nxp USB driver component. The vulnerability stems from improper reference counting when handling node pointers returned by of_parse_phandle() (NVD CVE Details).

The vulnerability exists in the ohci_hcd_nxp_probe function where of_parse_phandle() returns a node pointer with an incremented reference count. The issue occurs because the code fails to properly decrement this count using of_node_put() when the pointer is no longer needed, leading to a reference counting error (NVD CVE Details).

The vulnerability results in a memory leak in the kernel due to improper reference counting. While this may not lead to immediate system compromise, it could potentially cause system resource exhaustion over time if the affected code path is repeatedly triggered (Wiz).

The issue has been resolved by adding the missing of_node_put() call to properly release the reference count when the node pointer is no longer needed. This fix ensures proper cleanup of system resources (NVD CVE Details).