CVE-2022-49373

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49373
In the Linux kernel, the following vulnerability has been resolved: watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in some error paths.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5b110d940417942bc87d9e4bea6d4f24e05ed483 Patch
https://git.kernel.org/stable/c/5d24df3d690809952528e7a19a43d84bc5b99d44 Patch
https://git.kernel.org/stable/c/7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253 Patch
https://git.kernel.org/stable/c/910b1cdf6c50ae8fb222e46657d04fb181577017 Patch
https://git.kernel.org/stable/c/91fa5aa53f68b85e779164b3127c7e23cad5c457 Patch
https://git.kernel.org/stable/c/f067b5286edfd83d2d3903e8578b561599d62539 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Apr 2025, 20:37

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: watchdog: ts4800_wdt: Se corrige la pérdida de recuento de referencias en ts4800_wdt_probe of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado; cuando termine, debemos usar of_node_put() en él. Se agrega of_node_put() faltante en algunas rutas de error.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/5b110d940417942bc87d9e4bea6d4f24e05ed483 - () https://git.kernel.org/stable/c/5b110d940417942bc87d9e4bea6d4f24e05ed483 - Patch
References () https://git.kernel.org/stable/c/5d24df3d690809952528e7a19a43d84bc5b99d44 - () https://git.kernel.org/stable/c/5d24df3d690809952528e7a19a43d84bc5b99d44 - Patch
References () https://git.kernel.org/stable/c/7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253 - () https://git.kernel.org/stable/c/7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253 - Patch
References () https://git.kernel.org/stable/c/910b1cdf6c50ae8fb222e46657d04fb181577017 - () https://git.kernel.org/stable/c/910b1cdf6c50ae8fb222e46657d04fb181577017 - Patch
References () https://git.kernel.org/stable/c/91fa5aa53f68b85e779164b3127c7e23cad5c457 - () https://git.kernel.org/stable/c/91fa5aa53f68b85e779164b3127c7e23cad5c457 - Patch
References () https://git.kernel.org/stable/c/f067b5286edfd83d2d3903e8578b561599d62539 - () https://git.kernel.org/stable/c/f067b5286edfd83d2d3903e8578b561599d62539 - Patch
First Time Linux linux Kernel
Linux
CWE NVD-CWE-Other

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-14 20:37

NVD link : CVE-2022-49373

Mitre link : CVE-2022-49373

CVE.ORG link : CVE-2022-49373

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other