CVE-2022-49652

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49652
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. Add missing of_node_put() in to fix this.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/37147e22cd8dfc0412495cb361708836157a4486 Patch
https://git.kernel.org/stable/c/3bd66010398871807c1cebacee07d60ded1b1402 Patch
https://git.kernel.org/stable/c/452b9dfd7aca96befce22634fadb111737f22bbe Patch
https://git.kernel.org/stable/c/61b4ef19c346dc21ab1d4f39f5c412e3037b2bdc Patch
https://git.kernel.org/stable/c/b31ab132561c7f1b6459039152b8d09e44eb3565 Patch
https://git.kernel.org/stable/c/b5a817f8d62e9e13280928f3756e54854ae4962e Patch
https://git.kernel.org/stable/c/c132fe78ad7b4ce8b5d49a501a15c29d08eeb23a Patch
https://git.kernel.org/stable/c/cb9813d7eae917acd34436160a278b8b5d48ca53 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
History

11 Mar 2025, 22:01

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/37147e22cd8dfc0412495cb361708836157a4486 - () https://git.kernel.org/stable/c/37147e22cd8dfc0412495cb361708836157a4486 - Patch
References () https://git.kernel.org/stable/c/3bd66010398871807c1cebacee07d60ded1b1402 - () https://git.kernel.org/stable/c/3bd66010398871807c1cebacee07d60ded1b1402 - Patch
References () https://git.kernel.org/stable/c/452b9dfd7aca96befce22634fadb111737f22bbe - () https://git.kernel.org/stable/c/452b9dfd7aca96befce22634fadb111737f22bbe - Patch
References () https://git.kernel.org/stable/c/61b4ef19c346dc21ab1d4f39f5c412e3037b2bdc - () https://git.kernel.org/stable/c/61b4ef19c346dc21ab1d4f39f5c412e3037b2bdc - Patch
References () https://git.kernel.org/stable/c/b31ab132561c7f1b6459039152b8d09e44eb3565 - () https://git.kernel.org/stable/c/b31ab132561c7f1b6459039152b8d09e44eb3565 - Patch
References () https://git.kernel.org/stable/c/b5a817f8d62e9e13280928f3756e54854ae4962e - () https://git.kernel.org/stable/c/b5a817f8d62e9e13280928f3756e54854ae4962e - Patch
References () https://git.kernel.org/stable/c/c132fe78ad7b4ce8b5d49a501a15c29d08eeb23a - () https://git.kernel.org/stable/c/c132fe78ad7b4ce8b5d49a501a15c29d08eeb23a - Patch
References () https://git.kernel.org/stable/c/cb9813d7eae917acd34436160a278b8b5d48ca53 - () https://git.kernel.org/stable/c/cb9813d7eae917acd34436160a278b8b5d48ca53 - Patch
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: ti: Se corrige la pérdida de recuento de referencias en ti_dra7_xbar_route_allocate. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Deberíamos usar of_node_put() en él cuando ya no sea necesario. Agregue of_node_put() faltante para corregir esto.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-11 22:01

NVD link : CVE-2022-49652

Mitre link : CVE-2022-49652

CVE.ORG link : CVE-2022-49652

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other