CVE-2022-49324

mips: cpc: Fix refcount leak in mips_cpc_default_phys_base

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 23, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mips: cpc: Fix refcount leak in mips_cpc_default_phys_base

Add the missing of_node_put() to release the refcount incremented by of_find_compatible_node().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dc2f0da8350e413923ad67e2e26d8d9f1fb97aff to before bed702566dcdb6ebe300bc0c62bf3600cf4d5874Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before 961ee8a6eeef4632a215d995d837b204f8c7c2d4Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before c667b3872a4c435a3f29d4e15971cd8c378b0043Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before 1699ec1bfb59304a788901474f6bb003f7831b61Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before 8f843cdfc202caaa5d67db3395d893e56362e43aAffected 791412dafbbfd860e78983d45cf71db603a82f67 to before aae6b4bb63c694bc91714412718f15468407fe51Affected 791412dafbbfd860e78983d45cf71db603a82f67 to before 4107fa700f314592850e2c64608f6ede4c077476Affected 7a676d14cc093c19c07d213a0ddc7f5c47154aaeAffected 4.14.27 to before 4.14.283Affected 4.15.10 to before 4.16Affected
LinuxLinux	4.16Affected before 4.16Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

dc2f0da8350e413923ad67e2e26d8d9f1fb97aff to before bed702566dcdb6ebe300bc0c62bf3600cf4d5874Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before 961ee8a6eeef4632a215d995d837b204f8c7c2d4Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before c667b3872a4c435a3f29d4e15971cd8c378b0043Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before 1699ec1bfb59304a788901474f6bb003f7831b61Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before 8f843cdfc202caaa5d67db3395d893e56362e43aAffected
791412dafbbfd860e78983d45cf71db603a82f67 to before aae6b4bb63c694bc91714412718f15468407fe51Affected
791412dafbbfd860e78983d45cf71db603a82f67 to before 4107fa700f314592850e2c64608f6ede4c077476Affected
7a676d14cc093c19c07d213a0ddc7f5c47154aaeAffected
4.14.27 to before 4.14.283Affected
4.15.10 to before 4.16Affected

LinuxLinux

4.16Affected
before 4.16Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.