CVE-2022-49462

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49462
In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. a6xx_gmu_init() passes the node to of_find_device_by_node() and of_dma_configure(), of_find_device_by_node() will takes its reference, of_dma_configure() doesn't need the node after usage. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06907a374f1b74f8f2fb30720dc6df81331e4fb5 Patch
https://git.kernel.org/stable/c/48e82ce8cdb19c20a5020fa446b286d6a147450c Patch
https://git.kernel.org/stable/c/65ddbc0d26824e2a5d6154d01d8cf39344900213 Patch
https://git.kernel.org/stable/c/6832e36f156ea35a6ed74bca72727806116effdd Patch
https://git.kernel.org/stable/c/c56de483093d7ad0782327f95dda7da97bc4c315 Patch
https://git.kernel.org/stable/c/edff4c1af831d0c02e654eed9da7d74174de49d5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:10

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/06907a374f1b74f8f2fb30720dc6df81331e4fb5 - () https://git.kernel.org/stable/c/06907a374f1b74f8f2fb30720dc6df81331e4fb5 - Patch
References () https://git.kernel.org/stable/c/48e82ce8cdb19c20a5020fa446b286d6a147450c - () https://git.kernel.org/stable/c/48e82ce8cdb19c20a5020fa446b286d6a147450c - Patch
References () https://git.kernel.org/stable/c/65ddbc0d26824e2a5d6154d01d8cf39344900213 - () https://git.kernel.org/stable/c/65ddbc0d26824e2a5d6154d01d8cf39344900213 - Patch
References () https://git.kernel.org/stable/c/6832e36f156ea35a6ed74bca72727806116effdd - () https://git.kernel.org/stable/c/6832e36f156ea35a6ed74bca72727806116effdd - Patch
References () https://git.kernel.org/stable/c/c56de483093d7ad0782327f95dda7da97bc4c315 - () https://git.kernel.org/stable/c/c56de483093d7ad0782327f95dda7da97bc4c315 - Patch
References () https://git.kernel.org/stable/c/edff4c1af831d0c02e654eed9da7d74174de49d5 - () https://git.kernel.org/stable/c/edff4c1af831d0c02e654eed9da7d74174de49d5 - Patch
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/a6xx: Se corrige la pérdida de recuento de referencias en a6xx_gpu_init of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deberíamos usar of_node_put() en él cuando ya no lo necesitemos. a6xx_gmu_init() pasa el nodo a of_find_device_by_node() y of_dma_configure(), of_find_device_by_node() tomará su referencia, of_dma_configure() no necesita el nodo después del uso. Agregue of_node_put() faltante para evitar la pérdida de recuento de referencias.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:10

NVD link : CVE-2022-49462

Mitre link : CVE-2022-49462

CVE.ORG link : CVE-2022-49462

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other