CVE-2022-49242

ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

This function only calls of_node_put() in the regular path. And it will cause refcount leak in error paths. For example, when codec_np is NULL, saif_np[0] and saif_np[1] are not NULL, it will cause leaks.

of_node_put() will check if the node pointer is NULL, so we can call it directly to release the refcount of regular pointers.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e968194b45c4e8077dada75c5bae5660b37628fe to before f16ad2c0e22687f80e5981c67374023f51c204b9Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 790d2628e3fcc819d8f5572eb5615113fb2e727aAffected e968194b45c4e8077dada75c5bae5660b37628fe to before f8d38056bcd220ea6f0802a5586d1a12ebcce849Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 67e12f1cb2f97468c12b59e21975eaa0f332e7d2Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 86b6cf989437e694fd0a15782b5a513853a739e0Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 44acdaf7acb60054d872bed18ce0e7db8ce900ceAffected e968194b45c4e8077dada75c5bae5660b37628fe to before d2923b48d99fe663cb93d8b481c93299fcd68656Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 8d880226c86f37624e2a5f3c6d92ac0ec3375f96Affected e968194b45c4e8077dada75c5bae5660b37628fe to before 6ae0a4d8fec551ec581d620f0eb1fe31f755551cAffected
LinuxLinux	3.5Affected before 3.5Not affected 4.9.311 through 4.9.Not affected 4.14.276 through 4.14.Not affected 4.19.238 through 4.19.Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

e968194b45c4e8077dada75c5bae5660b37628fe to before f16ad2c0e22687f80e5981c67374023f51c204b9Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 790d2628e3fcc819d8f5572eb5615113fb2e727aAffected
e968194b45c4e8077dada75c5bae5660b37628fe to before f8d38056bcd220ea6f0802a5586d1a12ebcce849Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 67e12f1cb2f97468c12b59e21975eaa0f332e7d2Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 86b6cf989437e694fd0a15782b5a513853a739e0Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 44acdaf7acb60054d872bed18ce0e7db8ce900ceAffected
e968194b45c4e8077dada75c5bae5660b37628fe to before d2923b48d99fe663cb93d8b481c93299fcd68656Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 8d880226c86f37624e2a5f3c6d92ac0ec3375f96Affected
e968194b45c4e8077dada75c5bae5660b37628fe to before 6ae0a4d8fec551ec581d620f0eb1fe31f755551cAffected

LinuxLinux

3.5Affected
before 3.5Not affected
4.9.311 through 4.9.*Not affected
4.14.276 through 4.14.*Not affected
4.19.238 through 4.19.*Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.