CVE-2022-49481

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49481
In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt of_node_get() returns a node with refcount incremented. Calling of_node_put() to drop the reference when not needed anymore.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362 Patch
https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb Patch
https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad Patch
https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9 Patch
https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 Patch
https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c Patch
https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d Patch
https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d Patch
https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362 - () https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362 - Patch
References () https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb - () https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb - Patch
References () https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad - () https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad - Patch
References () https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9 - () https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9 - Patch
References () https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 - () https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 - Patch
References () https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c - () https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c - Patch
References () https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d - () https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d - Patch
References () https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d - () https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d - Patch
References () https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c - () https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regulator: pfuze100: Se corrige la pérdida de recuento de referencias en pfuze_parse_regulators_dt. of_node_get() devuelve un nodo con un recuento de referencias incrementado. Se llama a of_node_put() para descartar la referencia cuando ya no se necesita.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:53

NVD link : CVE-2022-49481

Mitre link : CVE-2022-49481

CVE.ORG link : CVE-2022-49481

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other