CVE-2022-49439

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49439
In the Linux kernel, the following vulnerability has been resolved: powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/46fd994763cf6884b88a2da712af918f3ed54d7b Patch
https://git.kernel.org/stable/c/51e25fbf20c9152d84a34b7afac15a41fe5c9116 Patch
https://git.kernel.org/stable/c/5607a77a365df8c0fd5ff43ac424812b95775527 Patch
https://git.kernel.org/stable/c/5b8aa2ba38c010f47c965dd9bb5a8561813ed649 Patch
https://git.kernel.org/stable/c/7b668a59ddfb32727e39b06fdf52b28e58c684e0 Patch
https://git.kernel.org/stable/c/bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3 Patch
https://git.kernel.org/stable/c/c70dd353d37158e06bf8d450d4b31a7091609924 Patch
https://git.kernel.org/stable/c/fcee96924ba1596ca80a6770b2567ca546f9a482 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 19:53

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/46fd994763cf6884b88a2da712af918f3ed54d7b - () https://git.kernel.org/stable/c/46fd994763cf6884b88a2da712af918f3ed54d7b - Patch
References () https://git.kernel.org/stable/c/51e25fbf20c9152d84a34b7afac15a41fe5c9116 - () https://git.kernel.org/stable/c/51e25fbf20c9152d84a34b7afac15a41fe5c9116 - Patch
References () https://git.kernel.org/stable/c/5607a77a365df8c0fd5ff43ac424812b95775527 - () https://git.kernel.org/stable/c/5607a77a365df8c0fd5ff43ac424812b95775527 - Patch
References () https://git.kernel.org/stable/c/5b8aa2ba38c010f47c965dd9bb5a8561813ed649 - () https://git.kernel.org/stable/c/5b8aa2ba38c010f47c965dd9bb5a8561813ed649 - Patch
References () https://git.kernel.org/stable/c/7b668a59ddfb32727e39b06fdf52b28e58c684e0 - () https://git.kernel.org/stable/c/7b668a59ddfb32727e39b06fdf52b28e58c684e0 - Patch
References () https://git.kernel.org/stable/c/bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3 - () https://git.kernel.org/stable/c/bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3 - Patch
References () https://git.kernel.org/stable/c/c70dd353d37158e06bf8d450d4b31a7091609924 - () https://git.kernel.org/stable/c/c70dd353d37158e06bf8d450d4b31a7091609924 - Patch
References () https://git.kernel.org/stable/c/fcee96924ba1596ca80a6770b2567ca546f9a482 - () https://git.kernel.org/stable/c/fcee96924ba1596ca80a6770b2567ca546f9a482 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/fsl_rio: Se ha corregido la pérdida de recuento de referencias en fsl_rio_setup. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Deberíamos usar of_node_put() en él cuando ya no lo necesitemos. Se ha añadido el error of_node_put() que falta para evitar la pérdida de recuento de referencias.
CWE NVD-CWE-Other

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 19:53

NVD link : CVE-2022-49439

Mitre link : CVE-2022-49439

CVE.ORG link : CVE-2022-49439

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other