CVE-2022-50392: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50392 is a vulnerability discovered in the Linux kernel related to a refcount leak in the mt8183mt6358ts3a227max98357dev_probe() function of the ASoC (ALSA System on Chip) MediaTek mt8183 audio driver. The vulnerability was publicly disclosed and added to the NVD database on September 18, 2025 (NVD).

The vulnerability stems from improper resource management where the node returned by ofparsephandle() has its refcount incremented, but ofnodeput() is not called when finished using it in the error path of mt8183mt6358ts3a227max98357dev_probe(). This creates a reference counting issue in the MediaTek audio driver implementation (Debian Tracker).

The refcount leak in the Linux kernel's MediaTek audio driver could potentially lead to resource management issues. While specific impact details are limited, reference counting bugs can generally result in memory leaks or system resource exhaustion over time (NVD).

The vulnerability has been fixed in several Linux distributions. Debian has addressed this in version 6.1.4-1 and later releases. The fix has been implemented in various versions including bookworm (6.1.148-1), trixie (6.12.43-1), and forky (6.16.8-1) (Debian Tracker).