CVE-2022-49382

soc: rockchip: Fix refcount leak in rockchip_grf_init

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: rockchip: Fix refcount leak in rockchip_grf_init

of_find_matching_node_and_match returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before d5422f323858cad3ac3581075f9a3a5e0d41c0d8Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 28133325526b92921f3269fdf97a20d90b92b217Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 69a30b2ed620c2206cbbd1e9c112e4fc584e02bdAffected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 5b3e990f85eb034faa461e691e719e8ce9e2a3c8Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before aab25b669cb9fd3698c2631be4435f4fe92d9e59Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 042571fe1d171773655ad706715ecc865913d9a4Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 8f64e84924604bb969ee1fbc4b8d7d09b9214889Affected
  • 4c58063d4258f6beb4fd5647db6b58f49e337c8f to before 9b59588d8be91c96bfb0371e912ceb4f16315dbfAffected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 4.14.283 through 4.14.*Not affected
  • 4.19.247 through 4.19.*Not affected
  • 5.4.198 through 5.4.*Not affected
  • 5.10.122 through 5.10.*Not affected
  • 5.15.47 through 5.15.*Not affected
  • 5.17.15 through 5.17.*Not affected
  • 5.18.4 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.