CVE-2022-49382

Summary

In the Linux kernel, the following vulnerability has been resolved:

soc: rockchip: Fix refcount leak in rockchip_grf_init

of_find_matching_node_and_match returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < d5422f323858cad3ac3581075f9a3a5e0d41c0d8affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 28133325526b92921f3269fdf97a20d90b92b217affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 69a30b2ed620c2206cbbd1e9c112e4fc584e02bdaffected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 5b3e990f85eb034faa461e691e719e8ce9e2a3c8affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < aab25b669cb9fd3698c2631be4435f4fe92d9e59affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 042571fe1d171773655ad706715ecc865913d9a4affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 8f64e84924604bb969ee1fbc4b8d7d09b9214889affected
LinuxLinux4c58063d4258f6beb4fd5647db6b58f49e337c8f < 9b59588d8be91c96bfb0371e912ceb4f16315dbfaffected
LinuxLinux4.11affected
LinuxLinux0 < 4.11unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References