CVE-2022-49241

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe

The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done.

This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 90ac679aa6a01841da90ec5a4aaa4b5e0badddf0affected
LinuxLinuxfdbcb3cba54b29a37dfe42acdc0e72c543e0807d < f589063b585ac6dd2081bde6c145411cf48d8d92affected
LinuxLinuxfdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 14228225091a0854b1de23e5b4fe8bdeeca9683baffected
LinuxLinuxfdbcb3cba54b29a37dfe42acdc0e72c543e0807d < f43ad5dc43240289f4cf13c16cc506f4f7087931affected
LinuxLinuxfdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 740dc3e846537c3743da98bf106f376023fd085caffected
LinuxLinux3.12affected
LinuxLinux0 < 3.12unaffected
LinuxLinux5.10.110 <= 5.10.*unaffected
LinuxLinux5.15.33 <= 5.15.*unaffected
LinuxLinux5.16.19 <= 5.16.*unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References