CVE-2022-49351

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: altera: Fix refcount leak in altera_tse_mdio_create

Every iteration of for_each_child_of_node() decrements the reference count of the previous node. When break from a for_each_child_of_node() loop, we need to explicitly call of_node_put() on the child node when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < a013fa884d8738ad8455aa1a843b8c9d80c6c833affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 1fd12298a0e0ca23478c715e672ee64c85670584affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 5cd0e22fa11f4a21a8c09cc258f20b1474c95801affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 8174acbef87b8dd8bf3731eba2a5af1ac857e239affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 96bf5ed057df2d157274d4e2079002f9a9404bb8affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < e31d9ba169860687dba19bdc8fccbfd34077f655affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 803b217f1fb49a2dbb2123acdb45111b9c48b8beaffected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 4f850fe0a32c3f1e19b76996a3b1ca32637a14deaffected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 11ec18b1d8d92b9df307d31950dcba0b3dd7283caffected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References