CVE-2022-49752

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49752
In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() The 'parent' returned by fwnode_graph_get_port_parent() with refcount incremented when 'prev' is not NULL, it needs be put when finish using it. Because the parent is const, introduce a new variable to store the returned fwnode, then put it before returning from fwnode_graph_get_next_endpoint().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/39af728649b05e88a2b40e714feeee6451c3f18e Patch
https://git.kernel.org/stable/c/7701a4bd45c11f9a289d8f262fad05705a012339 Patch
https://git.kernel.org/stable/c/e75485fc589ec729cc182aa9b41dfb6c15ae6f6e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
History

14 Apr 2025, 20:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: propiedad del dispositivo: corrección de la fuga de recuento de referencias de nodos en fwnode_graph_get_next_endpoint(). El valor de "parent" devuelto por fwnode_graph_get_port_parent(), con un recuento de referencias incrementado cuando "prev" no es NULL, debe añadirse al finalizar su uso. Dado que "parent" es constante, se introduce una nueva variable para almacenar el fwnode devuelto y se añade antes de que fwnode_graph_get_next_endpoint() lo devuelva.
References () https://git.kernel.org/stable/c/39af728649b05e88a2b40e714feeee6451c3f18e - () https://git.kernel.org/stable/c/39af728649b05e88a2b40e714feeee6451c3f18e - Patch
References () https://git.kernel.org/stable/c/7701a4bd45c11f9a289d8f262fad05705a012339 - () https://git.kernel.org/stable/c/7701a4bd45c11f9a289d8f262fad05705a012339 - Patch
References () https://git.kernel.org/stable/c/e75485fc589ec729cc182aa9b41dfb6c15ae6f6e - () https://git.kernel.org/stable/c/e75485fc589ec729cc182aa9b41dfb6c15ae6f6e - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other

27 Mar 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-27 17:15

Updated : 2025-04-14 20:16

NVD link : CVE-2022-49752

Mitre link : CVE-2022-49752

CVE.ORG link : CVE-2022-49752

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other