CVE-2022-49477

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: samsung: Fix refcount leak in aries_audio_probe

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. If extcon_find_edev_by_node() fails, it doesn't call of_node_put() Calling of_node_put() after extcon_find_edev_by_node() to fix this.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7a3a7671fa6c7e90aff5f4242add2a40587b85ef < cacea459f95be22b3750f3b25b7a1c5897a68206affected
LinuxLinux7a3a7671fa6c7e90aff5f4242add2a40587b85ef < 85d899f396622d3034643bf89615a78f9be7c91aaffected
LinuxLinux7a3a7671fa6c7e90aff5f4242add2a40587b85ef < 70130bde3457d28c02c76b6cacc5d40a72dd6e17affected
LinuxLinux7a3a7671fa6c7e90aff5f4242add2a40587b85ef < 46d1b310a2d571811c4e08041ce287babb60b86aaffected
LinuxLinux7a3a7671fa6c7e90aff5f4242add2a40587b85ef < bf4a9b2467b775717d0e9034ad916888e19713a3affected
LinuxLinux5.9affected
LinuxLinux0 < 5.9unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References