CVE-2022-50572

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

The of_get_next_child() returns a node with refcount incremented, and decrements the refcount of prev. So in the error path of the while loop, of_node_put() needs be called for cpu_ep.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < ed1376f771404917c2ec3ebc617431ec01146134affected
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < 06c9d468c06806dab752eb8e72addbf3792c1023affected
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < 85eb5c952b7fe2d2059beaa4a4dd26688b25547baffected
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < 49dad92af6892f46851af989ef3aa7cd7316c389affected
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < 4cc8431ec77a43ea106d8bde0860c61cfdda1cd0affected
LinuxLinuxfce9b90c1ab7e915553c57353355700c79b39c86 < 8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0affected
LinuxLinux5.1affected
LinuxLinux0 < 5.1unaffected
LinuxLinux5.4.229 <= 5.4.*unaffected
LinuxLinux5.10.163 <= 5.10.*unaffected
LinuxLinux5.15.86 <= 5.15.*unaffected
LinuxLinux6.0.16 <= 6.0.*unaffected
LinuxLinux6.1.2 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

References