CVE-2022-49354
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() to avoid refcount leak.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 7bd85c5ba1687daf54e3b6907673c3604b1e75cf | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 8d8ad067b90f231b8fdb14acee673ca4012f6045 | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < d5a1e7f33c88780b279835d63665d7e38ccb671f | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 19cb3ece14547cb1ca2021798aaf49a3f82643d1 | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 888312dc297a8a103f6371ef668c7e04f57a7679 | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < c9782e1b21bee4b783a64b2a91e7e71406c21a21 | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < fb2cb409b504bb3a69e65a17f3120328c8e50219 | affected |
| Linux | Linux | 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 10d6bdf532902be1d8aa5900b3c03c5671612aa2 | affected |
| Linux | Linux | 3.8 | affected |
| Linux | Linux | 0 < 3.8 | unaffected |
| Linux | Linux | 4.9.318 <= 4.9.* | unaffected |
| Linux | Linux | 4.14.283 <= 4.14.* | unaffected |
| Linux | Linux | 4.19.247 <= 4.19.* | unaffected |
| Linux | Linux | 5.4.198 <= 5.4.* | unaffected |
| Linux | Linux | 5.10.122 <= 5.10.* | unaffected |
| Linux | Linux | 5.15.47 <= 5.15.* | unaffected |
| Linux | Linux | 5.17.15 <= 5.17.* | unaffected |
| Linux | Linux | 5.18.4 <= 5.18.* | unaffected |
| Linux | Linux | 5.19 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://git.kernel.org/stable/c/7bd85c5ba1687daf54e3b6907673c3604b1e75cf
- https://git.kernel.org/stable/c/a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b
- https://git.kernel.org/stable/c/8d8ad067b90f231b8fdb14acee673ca4012f6045
- https://git.kernel.org/stable/c/d5a1e7f33c88780b279835d63665d7e38ccb671f
- https://git.kernel.org/stable/c/19cb3ece14547cb1ca2021798aaf49a3f82643d1
- https://git.kernel.org/stable/c/888312dc297a8a103f6371ef668c7e04f57a7679
- https://git.kernel.org/stable/c/c9782e1b21bee4b783a64b2a91e7e71406c21a21
- https://git.kernel.org/stable/c/fb2cb409b504bb3a69e65a17f3120328c8e50219
- https://git.kernel.org/stable/c/10d6bdf532902be1d8aa5900b3c03c5671612aa2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.