In the Linux kernel, the following vulnerability has been resolved:

mcb: mcb-parse: fix error handing in chameleon_parse_gdd()

If mcb_device_register() returns error in chameleon_parse_gdd(), the refcount
of bus and device name are leaked. Fix this by calling put_device() to give up
the reference, so they can be released in mcb_release_dev() and kobject_cleanup().

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00049.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 891f606ae0765bc9ca99f5276735be4d338f0255
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < cf6e70c0ced50b52415ac0c88eba1fb09c500a5a
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < fd85ece416fd7edb945203e59d4cd94952f77e7c
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 110dc34c9fa33d37f55b394b1199ea6c0ad1ee84
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 7b289b791a59386dc23a00d3cf17a0db984b40d3
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 43bfc7c2402a22d3b4eb08c040f274ba2b76461a
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < b948baa29394ec5f4e6ec28486e7d06a76caee91
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 4a9f1a8b3af287581ffb690d0e1593c681729ddb
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 affected < 728ac3389296caf68638628c987aeae6c8851e2d
Linux Linux affected
Version Status Constraints
3.15 affected —
0 unaffected < 3.15
4.9.337 unaffected ≤ 4.9.*
4.14.303 unaffected ≤ 4.14.*
4.19.270 unaffected ≤ 4.19.*
5.4.229 unaffected ≤ 5.4.*
5.10.163 unaffected ≤ 5.10.*
5.15.86 unaffected ≤ 5.15.*
6.0.16 unaffected ≤ 6.0.*
6.1.2 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/110dc34c9fa33d37f55b394b1199ea6c0ad1ee84 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/43bfc7c2402a22d3b4eb08c040f274ba2b76461a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/4a9f1a8b3af287581ffb690d0e1593c681729ddb cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/728ac3389296caf68638628c987aeae6c8851e2d cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/7b289b791a59386dc23a00d3cf17a0db984b40d3 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/891f606ae0765bc9ca99f5276735be4d338f0255 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/b948baa29394ec5f4e6ec28486e7d06a76caee91 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/cf6e70c0ced50b52415ac0c88eba1fb09c500a5a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/fd85ece416fd7edb945203e59d4cd94952f77e7c cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50522 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50522 cve-icon
History

Wed, 04 Feb 2026 17:15:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Wed, 08 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 08 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References

Tue, 07 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleon_parse_gdd() If mcb_device_register() returns error in chameleon_parse_gdd(), the refcount of bus and device name are leaked. Fix this by calling put_device() to give up the reference, so they can be released in mcb_release_dev() and kobject_cleanup().
Title mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-07T15:19:15.923Z

Reserved: 2025-10-07T15:15:38.663Z

Link: CVE-2022-50522

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-07T16:15:36.017

Modified: 2026-02-04T17:01:28.190

Link: CVE-2022-50522

cve-icon Redhat

Severity :

Publid Date: 2025-10-07T15:19:15Z

Links: CVE-2022-50522 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-08T13:36:54Z

Weaknesses