CVE-2022-49239

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49239
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This is similar to commit 64b92de9603f ("ASoC: wcd9335: fix a leaked reference by adding missing of_node_put")

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1f24716e38220fc9e52e208d20591d2bc9b7f020 Patch
https://git.kernel.org/stable/c/2f44eca78cc6d4e1779eb95765ec79e433accab4 Patch
https://git.kernel.org/stable/c/9531a631379169d57756b2411178c6238655df88 Patch
https://git.kernel.org/stable/c/f3793eeb7b94a5eeed6f5c7a44bce403c6681a12 Patch
https://git.kernel.org/stable/c/f8e89d84ea83c51ba3ba97ff154f7aa679326760 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 19:28

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1f24716e38220fc9e52e208d20591d2bc9b7f020 - () https://git.kernel.org/stable/c/1f24716e38220fc9e52e208d20591d2bc9b7f020 - Patch
References () https://git.kernel.org/stable/c/2f44eca78cc6d4e1779eb95765ec79e433accab4 - () https://git.kernel.org/stable/c/2f44eca78cc6d4e1779eb95765ec79e433accab4 - Patch
References () https://git.kernel.org/stable/c/9531a631379169d57756b2411178c6238655df88 - () https://git.kernel.org/stable/c/9531a631379169d57756b2411178c6238655df88 - Patch
References () https://git.kernel.org/stable/c/f3793eeb7b94a5eeed6f5c7a44bce403c6681a12 - () https://git.kernel.org/stable/c/f3793eeb7b94a5eeed6f5c7a44bce403c6681a12 - Patch
References () https://git.kernel.org/stable/c/f8e89d84ea83c51ba3ba97ff154f7aa679326760 - () https://git.kernel.org/stable/c/f8e89d84ea83c51ba3ba97ff154f7aa679326760 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: codecs: wcd934x: Agregar la falta de of_node_put() en wcd934x_codec_parse_data El puntero device_node es devuelto por of_parse_phandle() con refcount incrementado. Deberíamos usar of_node_put() en él cuando haya terminado. Esto es similar a el commit 64b92de9603f ("ASoC: wcd9335: corregir una referencia filtrada agregando la falta de of_node_put")
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
First Time Linux
Linux linux Kernel

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-18 19:28

NVD link : CVE-2022-49239

Mitre link : CVE-2022-49239

CVE.ORG link : CVE-2022-49239

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other