CVE-2022-49113

powerpc/secvar: fix refcount leak in format_show()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/secvar: fix refcount leak in format_show()

Refcount leak will happen when format_show returns failure in multiple cases. Unified management of of_node_put can fix this problem.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before 02222bf4f0a27f6eba66d1f597cdb5daadd51829Affected bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before 2a71e3ecd829a82013cf095c55068c61d991e885Affected bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before c105ffb6b9744158e37e9f81f0f38861951d1c1fAffected bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before d05e4265d33af60b39606c20c731e3e719bfe3d6Affected bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before d601fd24e6964967f115f036a840f4f28488f63fAffected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before 02222bf4f0a27f6eba66d1f597cdb5daadd51829Affected
bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before 2a71e3ecd829a82013cf095c55068c61d991e885Affected
bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before c105ffb6b9744158e37e9f81f0f38861951d1c1fAffected
bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before d05e4265d33af60b39606c20c731e3e719bfe3d6Affected
bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec to before d601fd24e6964967f115f036a840f4f28488f63fAffected

LinuxLinux

5.5Affected
before 5.5Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.