CVE-2022-49457

Summary

In the Linux kernel, the following vulnerability has been resolved:

ARM: versatile: Add missing of_node_put in dcscb_init

The device_node pointer is returned by of_find_compatible_node with refcount incremented. We should use of_node_put() to avoid the refcount leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < 2d7b23db35254b7d46e852967090c64cdccf24daaffected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < bbdfb7d4f036118d36415a2575efa6f5246505aeaffected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < a0fc05cd17617e63fc13ad0c01f3f0afd890d8ecaffected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < fcd1999ba97445a12cc394f5f42ffd9116bf0185affected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < d146e2a9864ade19914494de3fb520390b415d58affected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < 83c329b980bddbc8c6a3d287d91f2103a4d4a860affected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < 3c6006faed9aba5144b33176d061031a9be66954affected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < d6de7b181c29cd4578ec139aafb5eac062abbe1baffected
LinuxLinux1e904e1bf6f1285cc2dd5696c44b7cf78cda643f < 23b44f9c649bbef10b45fa33080cd8b4166800aeaffected
LinuxLinux3.11affected
LinuxLinux0 < 3.11unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References