CVE-2022-49693

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49693
In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf of_graph_get_remote_node() returns remote device node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Patchwork: https://patchwork.freedesktop.org/patch/488473/

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3c39a17197733bc37786ed68c83267c2f491840b Patch
https://git.kernel.org/stable/c/b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0 Patch
https://git.kernel.org/stable/c/d1592d3e362cc59b29f15019707b16c695d70ca3 Patch
https://git.kernel.org/stable/c/d16a4339825e64f9ddcdff5277982d640bae933b Patch
https://git.kernel.org/stable/c/d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

11 Mar 2025, 21:57

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/mdp4: Se ha corregido la pérdida de recuento de referencias en mdp4_modeset_init_intf. of_graph_get_remote_node() devuelve un puntero de nodo de dispositivo remoto con un recuento de referencias incrementado. Deberíamos usar of_node_put() en él cuando ya no lo necesitemos. Se ha añadido el error of_node_put() que falta para evitar la pérdida de recuento de referencias. Patchwork: https://patchwork.freedesktop.org/patch/488473/
References () https://git.kernel.org/stable/c/3c39a17197733bc37786ed68c83267c2f491840b - () https://git.kernel.org/stable/c/3c39a17197733bc37786ed68c83267c2f491840b - Patch
References () https://git.kernel.org/stable/c/b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0 - () https://git.kernel.org/stable/c/b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0 - Patch
References () https://git.kernel.org/stable/c/d1592d3e362cc59b29f15019707b16c695d70ca3 - () https://git.kernel.org/stable/c/d1592d3e362cc59b29f15019707b16c695d70ca3 - Patch
References () https://git.kernel.org/stable/c/d16a4339825e64f9ddcdff5277982d640bae933b - () https://git.kernel.org/stable/c/d16a4339825e64f9ddcdff5277982d640bae933b - Patch
References () https://git.kernel.org/stable/c/d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1d - () https://git.kernel.org/stable/c/d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1d - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-11 21:57

NVD link : CVE-2022-49693

Mitre link : CVE-2022-49693

CVE.ORG link : CVE-2022-49693

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other