CVE-2022-49373

Summary

In the Linux kernel, the following vulnerability has been resolved:

watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in some error paths.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < 5b110d940417942bc87d9e4bea6d4f24e05ed483affected
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < 910b1cdf6c50ae8fb222e46657d04fb181577017affected
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < 7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253affected
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < 91fa5aa53f68b85e779164b3127c7e23cad5c457affected
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < f067b5286edfd83d2d3903e8578b561599d62539affected
LinuxLinuxbf9006399939762e6cd32445e848e56727df9d98 < 5d24df3d690809952528e7a19a43d84bc5b99d44affected
LinuxLinux4.5affected
LinuxLinux0 < 4.5unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References