CVE-2022-49437

powerpc/xive: Fix refcount leak in xive_spapr_init

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/xive: Fix refcount leak in xive_spapr_init

of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eac1e731b59ee3b5f5e641a7765c7ed41ed26226 to before 65f11ccdd746e0e7f0b469cc989ba43d4f30ecfeAffected eac1e731b59ee3b5f5e641a7765c7ed41ed26226 to before 6e806485d851986a2445267608f27cb4ba2ed774Affected eac1e731b59ee3b5f5e641a7765c7ed41ed26226 to before cc62dde2a5f4ba14016fd9caec76f08d388f4b9cAffected eac1e731b59ee3b5f5e641a7765c7ed41ed26226 to before 1d1fb9618bdd5a5fbf9a9eb75133da301d33721cAffected
LinuxLinux	4.14Affected before 4.14Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.