CVE-2022-49421

video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 6c92711db7c90f78e0b67ac2a8944d0fe7e12d83Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 2e2e2c71b2642289438392edbf5d08cdbc0b138bAffected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 51eb1bb6baeb478538dd4ec6459fd68c44a855b1Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 8db59df7f5826e104db82cfddbf22a33a151193eAffected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before c1c4405222b6fc98c16e8c2aa679c14e41d81465Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before f2dfb4ab887d67be7d0892ba041d3c8d738d3356Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before bbb2a24e863b6a10129546a0a4ceea2f07deec39Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 38d245cebf545338a6bc1c7762023de3fbecd7b7Affected d10715be03bd8bad59ddc50236cb140c3bd73c7b to before b23789a59fa6f00e98a319291819f91fbba0deb8Affected
LinuxLinux	3.17Affected before 3.17Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 6c92711db7c90f78e0b67ac2a8944d0fe7e12d83Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 2e2e2c71b2642289438392edbf5d08cdbc0b138bAffected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 51eb1bb6baeb478538dd4ec6459fd68c44a855b1Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 8db59df7f5826e104db82cfddbf22a33a151193eAffected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before c1c4405222b6fc98c16e8c2aa679c14e41d81465Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before f2dfb4ab887d67be7d0892ba041d3c8d738d3356Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before bbb2a24e863b6a10129546a0a4ceea2f07deec39Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before 38d245cebf545338a6bc1c7762023de3fbecd7b7Affected
d10715be03bd8bad59ddc50236cb140c3bd73c7b to before b23789a59fa6f00e98a319291819f91fbba0deb8Affected

LinuxLinux

3.17Affected
before 3.17Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.