CVE-2022-49482

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49482
In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7 Patch
https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730 Patch
https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc Patch
https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee Patch
https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f Patch
https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c Patch
https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd Patch
https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469 Patch
https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7 - () https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7 - Patch
References () https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730 - () https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730 - Patch
References () https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc - () https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc - Patch
References () https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee - () https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee - Patch
References () https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f - () https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f - Patch
References () https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c - () https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c - Patch
References () https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd - () https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd - Patch
References () https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469 - () https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469 - Patch
References () https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17 - () https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mxs-saif: se corrige la pérdida de recuento de referencias en mxs_saif_probe of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deberíamos usar of_node_put() en él cuando haya terminado.
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:53

NVD link : CVE-2022-49482

Mitre link : CVE-2022-49482

CVE.ORG link : CVE-2022-49482

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other