Riskcovery

CVE-2022-49213

ath10k: Fix error handling in ath10k_setup_msa_resources

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ath10k: Fix error handling in ath10k_setup_msa_resources

The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done.

This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 727fec790ead3d75e2735f66209949c2163523ea to before 315772133a4b960859e4f5efe0e738e347188cdcAffected
  • 727fec790ead3d75e2735f66209949c2163523ea to before 32939187f254171a5666badc058bc3787fe454afAffected
  • 727fec790ead3d75e2735f66209949c2163523ea to before 74b1d41e1b6410eed5c76d00eedb262036e9eff5Affected
  • 727fec790ead3d75e2735f66209949c2163523ea to before 4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335Affected
  • 727fec790ead3d75e2735f66209949c2163523ea to before 9747a78d5f758a5284751a10aee13c30d02bd5f1Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.