CVE-2022-49486

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49486
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe of_find_i2c_device_by_node() takes a reference, In error paths, we should call put_device() to drop the reference to aviod refount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7 Patch
https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21 Patch
https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5 Patch
https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329 Patch
https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a Patch
https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:52

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7 - () https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7 - Patch
References () https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21 - () https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21 - Patch
References () https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5 - () https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5 - Patch
References () https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329 - () https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329 - Patch
References () https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a - () https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a - Patch
References () https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29 - () https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: fsl: Se corrige la pérdida de recuento de referencias en imx_sgtl5000_probe. of_find_i2c_device_by_node() toma una referencia. En las rutas de error, debemos llamar a put_device() para eliminar la referencia y evitar la pérdida de recuento.
First Time Linux linux Kernel
Linux
CWE NVD-CWE-Other

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:52

NVD link : CVE-2022-49486

Mitre link : CVE-2022-49486

CVE.ORG link : CVE-2022-49486

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other