CVE-2022-49438

Summary

In the Linux kernel, the following vulnerability has been resolved:

Input: sparcspkr - fix refcount leak in bbc_beep_probe

of_find_node_by_path() calls of_find_node_opts_by_path(), which returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 2f51db16cb740ff90086189a1ef2581eab665591affected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < f13064b0f2c651a3fbb0749932795c6fd21556a8affected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 353bc58ac6c782d4dcde9136a91d1f90867938feaffected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < bbc2b0ce6042dd3117827f10ea8cb67e0ab786daaffected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 6e07ccc7d56130f760d23f67a70c45366c07debcaffected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 418b6a3e12f75638abc5673eb76cb32127d0ab13affected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 73d6f42d8d86648bec2e73d34fe1648cb6d23e08affected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < 1124e39fea0e2fdb4202f95b716cb97cc7de7cc7affected
LinuxLinux9c1a5077fdca99356c891af37931e537dea874f5 < c8994b30d71d64d5dcc9bc0edbfdf367171aa96faffected
LinuxLinux2.6.26affected
LinuxLinux0 < 2.6.26unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References