CVE-2022-49682

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49682
In the Linux kernel, the following vulnerability has been resolved: xtensa: Fix refcount leak bug in time.c In calibrate_ccount(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5 Patch
https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64 Patch
https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7 Patch
https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74 Patch
https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150 Patch
https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73 Patch
https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5 Patch
https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

11 Mar 2025, 21:55

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: xtensa: Fix refcount leak bug in time.c En calibrate_ccount(), of_find_compatible_node() devolverá un puntero de nodo con refcount incrementado. Deberíamos usar of_node_put() cuando ya no se use.
References () https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5 - () https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5 - Patch
References () https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64 - () https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64 - Patch
References () https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7 - () https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7 - Patch
References () https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74 - () https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74 - Patch
References () https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150 - () https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150 - Patch
References () https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73 - () https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73 - Patch
References () https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5 - () https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5 - Patch
References () https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23 - () https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23 - Patch
CWE NVD-CWE-Other

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-11 21:55

NVD link : CVE-2022-49682

Mitre link : CVE-2022-49682

CVE.ORG link : CVE-2022-49682

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other