CVE-2022-49463

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49463
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe of_find_node_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/09700c504d8e63faffd2a2235074e8c5d130cb8f Patch
https://git.kernel.org/stable/c/0ec10303c10833c1bcba7a1bde2f297e494d5464 Patch
https://git.kernel.org/stable/c/3ade442ea5d3512a3c67984489ab4d8a6fb3b29f Patch
https://git.kernel.org/stable/c/8bbf522a2c51ef939d0e8835e236bfcd252193af Patch
https://git.kernel.org/stable/c/ec0925b731697db7cab5944a3e55d2d58bb3d075 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal/drivers/imx_sc_thermal: Se corrige la pérdida de recuento de referencias en imx_sc_thermal_probe. of_find_node_by_name() devuelve un puntero de nodo con el recuento de referencias incrementado; cuando termine, debemos usar of_node_put() en él. Se agrega el error of_node_put() faltante para evitar la pérdida de recuento de referencias.
First Time Linux linux Kernel
Linux
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/09700c504d8e63faffd2a2235074e8c5d130cb8f - () https://git.kernel.org/stable/c/09700c504d8e63faffd2a2235074e8c5d130cb8f - Patch
References () https://git.kernel.org/stable/c/0ec10303c10833c1bcba7a1bde2f297e494d5464 - () https://git.kernel.org/stable/c/0ec10303c10833c1bcba7a1bde2f297e494d5464 - Patch
References () https://git.kernel.org/stable/c/3ade442ea5d3512a3c67984489ab4d8a6fb3b29f - () https://git.kernel.org/stable/c/3ade442ea5d3512a3c67984489ab4d8a6fb3b29f - Patch
References () https://git.kernel.org/stable/c/8bbf522a2c51ef939d0e8835e236bfcd252193af - () https://git.kernel.org/stable/c/8bbf522a2c51ef939d0e8835e236bfcd252193af - Patch
References () https://git.kernel.org/stable/c/ec0925b731697db7cab5944a3e55d2d58bb3d075 - () https://git.kernel.org/stable/c/ec0925b731697db7cab5944a3e55d2d58bb3d075 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:10

NVD link : CVE-2022-49463

Mitre link : CVE-2022-49463

CVE.ORG link : CVE-2022-49463

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other