CVE-2022-49621

Summary

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: pmac32-cpufreq: Fix refcount leak bug

In pmac_cpufreq_init_MacRISC3(), we need to add corresponding of_node_put() for the three node pointers whose refcount have been incremented by of_find_node_by_name().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4f242486bf46d314b2e3838cc64b56f008a3c4d7affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 37c16fc2cb13a13f3c0193bfc6f2edef7d7df7d7affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4585890ab2dbf455d80e254d3d859d4c1e357920affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8dda30f81c751b01cd71f2cfaeef26ad4393b1d1affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3ea9dbf7c2f436952bca331c6f5d72f75aca224eaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 57289b6601fe78c09921599b042a0b430fb420ecaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4513018d0bd739097570d26a7760551cba3deb56affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ccd7567d4b6cf187fdfa55f003a9e461ee629e36affected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux4.9.324 <= 4.9.*unaffected
LinuxLinux4.14.289 <= 4.14.*unaffected
LinuxLinux4.19.253 <= 4.19.*unaffected
LinuxLinux5.4.207 <= 5.4.*unaffected
LinuxLinux5.10.132 <= 5.10.*unaffected
LinuxLinux5.15.56 <= 5.15.*unaffected
LinuxLinux5.18.13 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References