CVE-2022-49213

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49213
In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10k_setup_msa_resources The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/315772133a4b960859e4f5efe0e738e347188cdc Patch
https://git.kernel.org/stable/c/32939187f254171a5666badc058bc3787fe454af Patch
https://git.kernel.org/stable/c/4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335 Patch
https://git.kernel.org/stable/c/74b1d41e1b6410eed5c76d00eedb262036e9eff5 Patch
https://git.kernel.org/stable/c/9747a78d5f758a5284751a10aee13c30d02bd5f1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 19:32

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath10k: Se ha corregido la gestión de errores en ath10k_setup_msa_resources El puntero device_node es devuelto por of_parse_phandle() con refcount incrementado. Deberíamos usar of_node_put() en él cuando haya terminado. Esta función solo llama a of_node_put() en la ruta normal. Y provocará una fuga de refcount en la ruta de error.
References () https://git.kernel.org/stable/c/315772133a4b960859e4f5efe0e738e347188cdc - () https://git.kernel.org/stable/c/315772133a4b960859e4f5efe0e738e347188cdc - Patch
References () https://git.kernel.org/stable/c/32939187f254171a5666badc058bc3787fe454af - () https://git.kernel.org/stable/c/32939187f254171a5666badc058bc3787fe454af - Patch
References () https://git.kernel.org/stable/c/4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335 - () https://git.kernel.org/stable/c/4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335 - Patch
References () https://git.kernel.org/stable/c/74b1d41e1b6410eed5c76d00eedb262036e9eff5 - () https://git.kernel.org/stable/c/74b1d41e1b6410eed5c76d00eedb262036e9eff5 - Patch
References () https://git.kernel.org/stable/c/9747a78d5f758a5284751a10aee13c30d02bd5f1 - () https://git.kernel.org/stable/c/9747a78d5f758a5284751a10aee13c30d02bd5f1 - Patch
CWE NVD-CWE-Other
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-18 19:32

NVD link : CVE-2022-49213

Mitre link : CVE-2022-49213

CVE.ORG link : CVE-2022-49213

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other