CVE-2022-49719

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49719
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix refcount leak in realview_gic_of_init of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/16b603cb8d34c2d917983918db1f88c8b831baaa Patch
https://git.kernel.org/stable/c/486f68f85085d9b16ae097679b1486dcb1b6eb69 Patch
https://git.kernel.org/stable/c/56526c3883fc7a1f5898b1d40a02c8b8685a5d92 Patch
https://git.kernel.org/stable/c/5d38720661a4b9c87705c206a6081177ffb8ec1d Patch
https://git.kernel.org/stable/c/87da903ce632d5689bef66d56ee5dae700d82104 Patch
https://git.kernel.org/stable/c/b634af84bc1edece4e63317b0ad95618dd3a8693 Patch
https://git.kernel.org/stable/c/e52a58b79f11755ea7e877015c4a1704303fa55f Patch
https://git.kernel.org/stable/c/f4b98e314888cc51486421bcf6d52852452ea48b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
History

07 Mar 2025, 20:44

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: irqchip/gic/realview: Se ha corregido la pérdida de recuento de referencias en realview_gic_of_init. of_find_matching_node_and_match() devuelve un puntero de nodo con el recuento de referencias incrementado. Deberíamos usar of_node_put() en él cuando ya no lo necesitemos. Se ha añadido el problema faltante de of_node_put() para evitar la pérdida de recuento de referencias.
References () https://git.kernel.org/stable/c/16b603cb8d34c2d917983918db1f88c8b831baaa - () https://git.kernel.org/stable/c/16b603cb8d34c2d917983918db1f88c8b831baaa - Patch
References () https://git.kernel.org/stable/c/486f68f85085d9b16ae097679b1486dcb1b6eb69 - () https://git.kernel.org/stable/c/486f68f85085d9b16ae097679b1486dcb1b6eb69 - Patch
References () https://git.kernel.org/stable/c/56526c3883fc7a1f5898b1d40a02c8b8685a5d92 - () https://git.kernel.org/stable/c/56526c3883fc7a1f5898b1d40a02c8b8685a5d92 - Patch
References () https://git.kernel.org/stable/c/5d38720661a4b9c87705c206a6081177ffb8ec1d - () https://git.kernel.org/stable/c/5d38720661a4b9c87705c206a6081177ffb8ec1d - Patch
References () https://git.kernel.org/stable/c/87da903ce632d5689bef66d56ee5dae700d82104 - () https://git.kernel.org/stable/c/87da903ce632d5689bef66d56ee5dae700d82104 - Patch
References () https://git.kernel.org/stable/c/b634af84bc1edece4e63317b0ad95618dd3a8693 - () https://git.kernel.org/stable/c/b634af84bc1edece4e63317b0ad95618dd3a8693 - Patch
References () https://git.kernel.org/stable/c/e52a58b79f11755ea7e877015c4a1704303fa55f - () https://git.kernel.org/stable/c/e52a58b79f11755ea7e877015c4a1704303fa55f - Patch
References () https://git.kernel.org/stable/c/f4b98e314888cc51486421bcf6d52852452ea48b - () https://git.kernel.org/stable/c/f4b98e314888cc51486421bcf6d52852452ea48b - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
CWE NVD-CWE-Other

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-07 20:44

NVD link : CVE-2022-49719

Mitre link : CVE-2022-49719

CVE.ORG link : CVE-2022-49719

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other