CVE-2022-49683

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49683
In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/501652a2ad5450b4908e1f204ce75b2414c305b7 Patch
https://git.kernel.org/stable/c/5eaa84e1605035a90a64d25b6cba79e89d188175 Patch
https://git.kernel.org/stable/c/ab7bf025cee89db73c649216ddd2bc589c3d3862 Patch
https://git.kernel.org/stable/c/ada7b0c0dedafd7d059115adf49e48acba3153a8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

11 Mar 2025, 21:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
CWE NVD-CWE-Other
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/501652a2ad5450b4908e1f204ce75b2414c305b7 - () https://git.kernel.org/stable/c/501652a2ad5450b4908e1f204ce75b2414c305b7 - Patch
References () https://git.kernel.org/stable/c/5eaa84e1605035a90a64d25b6cba79e89d188175 - () https://git.kernel.org/stable/c/5eaa84e1605035a90a64d25b6cba79e89d188175 - Patch
References () https://git.kernel.org/stable/c/ab7bf025cee89db73c649216ddd2bc589c3d3862 - () https://git.kernel.org/stable/c/ab7bf025cee89db73c649216ddd2bc589c3d3862 - Patch
References () https://git.kernel.org/stable/c/ada7b0c0dedafd7d059115adf49e48acba3153a8 - () https://git.kernel.org/stable/c/ada7b0c0dedafd7d059115adf49e48acba3153a8 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: adc: adi-axi-adc: Se corrige la pérdida de recuento de referencias en adi_axi_adc_attach_client of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deberíamos usar of_node_put() en él cuando ya no sea necesario. Agregue of_node_put() faltante para evitar la pérdida de recuento de referencias.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-11 21:55

NVD link : CVE-2022-49683

Mitre link : CVE-2022-49683

CVE.ORG link : CVE-2022-49683

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other