CVE-2022-49161

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe

The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done.

This function only calls of_node_put() in the regular path. And it will cause refcount leak in error paths. Fix this by calling of_node_put() in error handling too.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux11c0269017b212fd47c593307d2dc3eb9713b2d0 < 9b9f6227e8d0c7c46b6d9d7b8a5c4e0536049fcfaffected
LinuxLinux11c0269017b212fd47c593307d2dc3eb9713b2d0 < 28a265a1ee11febeec5ea73a804f30dcec3181caaffected
LinuxLinux5.2affected
LinuxLinux0 < 5.2unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

References