CVE-2022-49517

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe

This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < bc2afecaabd2a2c9f17e43b4793a30e3461bfb29affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < 9345122f5fb9f97a206f440f38bb656e53f46912affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < c71494f5f2b444adfd992a7359a0d2a791642b39affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < f279c49f17ce10866087ea6c0c57382158974b63affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < 61a85a20e8df5e0a92cfe169c92425c7bae0753baffected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < 318afb1442eeef089fe7f8a8297d97c0302ff6f6affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < 94587aa17abf8b26f543d2b29c44abc21bc36836affected
LinuxLinux8625c1dbd87631572f8e2c05bc67736b73d6f02f < 05654431a18fe24e5e46a375d98904134628a102affected
LinuxLinux4.12affected
LinuxLinux0 < 4.12unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References