CVE-2022-50444: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50444 is a vulnerability discovered in the Linux kernel affecting the clock (clk) subsystem, specifically in the Tegra20 clock initialization functionality. The vulnerability was disclosed on October 1, 2025, and involves a reference count leak in the tegra20_clock_init function (NVD).

The vulnerability stems from improper reference counting in the tegra20_clock_init function. Specifically, the of_find_matching_node() function returns a node pointer with an incremented reference count, but the code fails to use of_node_put() when it's no longer needed, resulting in a reference count leak (Ubuntu).

The reference count leak in the kernel's clock subsystem could potentially lead to resource exhaustion over time, though the immediate impact appears to be limited. The vulnerability has been assigned a medium priority by Ubuntu, indicating moderate severity (Ubuntu).

Multiple Linux distributions have released patches to address this vulnerability. Ubuntu has implemented fixes across various kernel versions, including linux-hwe-5.15 (5.15.0-60.66~20.04.1) for 20.04 LTS and linux-azure-5.15 (5.15.0-1033.40~20.04.1) for Azure systems (Ubuntu).