CVE-2022-49438

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49438
In the Linux kernel, the following vulnerability has been resolved: Input: sparcspkr - fix refcount leak in bbc_beep_probe of_find_node_by_path() calls of_find_node_opts_by_path(), which returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1124e39fea0e2fdb4202f95b716cb97cc7de7cc7 Patch
https://git.kernel.org/stable/c/2f51db16cb740ff90086189a1ef2581eab665591 Patch
https://git.kernel.org/stable/c/353bc58ac6c782d4dcde9136a91d1f90867938fe Patch
https://git.kernel.org/stable/c/418b6a3e12f75638abc5673eb76cb32127d0ab13 Patch
https://git.kernel.org/stable/c/6e07ccc7d56130f760d23f67a70c45366c07debc Patch
https://git.kernel.org/stable/c/73d6f42d8d86648bec2e73d34fe1648cb6d23e08 Patch
https://git.kernel.org/stable/c/bbc2b0ce6042dd3117827f10ea8cb67e0ab786da Patch
https://git.kernel.org/stable/c/c8994b30d71d64d5dcc9bc0edbfdf367171aa96f Patch
https://git.kernel.org/stable/c/f13064b0f2c651a3fbb0749932795c6fd21556a8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 19:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1124e39fea0e2fdb4202f95b716cb97cc7de7cc7 - () https://git.kernel.org/stable/c/1124e39fea0e2fdb4202f95b716cb97cc7de7cc7 - Patch
References () https://git.kernel.org/stable/c/2f51db16cb740ff90086189a1ef2581eab665591 - () https://git.kernel.org/stable/c/2f51db16cb740ff90086189a1ef2581eab665591 - Patch
References () https://git.kernel.org/stable/c/353bc58ac6c782d4dcde9136a91d1f90867938fe - () https://git.kernel.org/stable/c/353bc58ac6c782d4dcde9136a91d1f90867938fe - Patch
References () https://git.kernel.org/stable/c/418b6a3e12f75638abc5673eb76cb32127d0ab13 - () https://git.kernel.org/stable/c/418b6a3e12f75638abc5673eb76cb32127d0ab13 - Patch
References () https://git.kernel.org/stable/c/6e07ccc7d56130f760d23f67a70c45366c07debc - () https://git.kernel.org/stable/c/6e07ccc7d56130f760d23f67a70c45366c07debc - Patch
References () https://git.kernel.org/stable/c/73d6f42d8d86648bec2e73d34fe1648cb6d23e08 - () https://git.kernel.org/stable/c/73d6f42d8d86648bec2e73d34fe1648cb6d23e08 - Patch
References () https://git.kernel.org/stable/c/bbc2b0ce6042dd3117827f10ea8cb67e0ab786da - () https://git.kernel.org/stable/c/bbc2b0ce6042dd3117827f10ea8cb67e0ab786da - Patch
References () https://git.kernel.org/stable/c/c8994b30d71d64d5dcc9bc0edbfdf367171aa96f - () https://git.kernel.org/stable/c/c8994b30d71d64d5dcc9bc0edbfdf367171aa96f - Patch
References () https://git.kernel.org/stable/c/f13064b0f2c651a3fbb0749932795c6fd21556a8 - () https://git.kernel.org/stable/c/f13064b0f2c651a3fbb0749932795c6fd21556a8 - Patch
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Entrada: sparcspkr - corrige la pérdida de recuento de referencias en las llamadas de bbc_beep_probe of_find_node_by_path() a of_find_node_opts_by_path(), que devuelve un puntero de nodo con el recuento de referencias incrementado; cuando termine, deberíamos usar of_node_put() en él. Agregue la falta de of_node_put() para evitar la pérdida de recuento de referencias.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 19:53

NVD link : CVE-2022-49438

Mitre link : CVE-2022-49438

CVE.ORG link : CVE-2022-49438

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other