CVE-2022-49431

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49431
In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Add missing of_node_put in iommu_init_early_dart The device_node pointer is returned by of_find_compatible_node with refcount incremented. We should use of_node_put() to avoid the refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/57b742a5b8945118022973e6416b71351df512fb Patch
https://git.kernel.org/stable/c/7e3f1dfb9e21733d7276bc9ccea4daada163f2ba Patch
https://git.kernel.org/stable/c/8657e8ea23325949091da72453ba84fb73cc2bd9 Patch
https://git.kernel.org/stable/c/cb4f2dc513e99c5d0485661f114e4dda73612d10 Patch
https://git.kernel.org/stable/c/df6d8b689252c0acc0448d4ae3d33f2d6db048ab Patch
https://git.kernel.org/stable/c/dfc308d6f29aa28463deb9a12278a85a382385ca Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Oct 2025, 17:26

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/iommu: falta of_node_put en iommu_init_early_dart El puntero device_node es devuelto por of_find_compatible_node con refcount incrementado. Deberíamos usar of_node_put() para evitar la fuga de refcount.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/57b742a5b8945118022973e6416b71351df512fb - () https://git.kernel.org/stable/c/57b742a5b8945118022973e6416b71351df512fb - Patch
References () https://git.kernel.org/stable/c/7e3f1dfb9e21733d7276bc9ccea4daada163f2ba - () https://git.kernel.org/stable/c/7e3f1dfb9e21733d7276bc9ccea4daada163f2ba - Patch
References () https://git.kernel.org/stable/c/8657e8ea23325949091da72453ba84fb73cc2bd9 - () https://git.kernel.org/stable/c/8657e8ea23325949091da72453ba84fb73cc2bd9 - Patch
References () https://git.kernel.org/stable/c/cb4f2dc513e99c5d0485661f114e4dda73612d10 - () https://git.kernel.org/stable/c/cb4f2dc513e99c5d0485661f114e4dda73612d10 - Patch
References () https://git.kernel.org/stable/c/df6d8b689252c0acc0448d4ae3d33f2d6db048ab - () https://git.kernel.org/stable/c/df6d8b689252c0acc0448d4ae3d33f2d6db048ab - Patch
References () https://git.kernel.org/stable/c/dfc308d6f29aa28463deb9a12278a85a382385ca - () https://git.kernel.org/stable/c/dfc308d6f29aa28463deb9a12278a85a382385ca - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-22 17:26

NVD link : CVE-2022-49431

Mitre link : CVE-2022-49431

CVE.ORG link : CVE-2022-49431

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo