CVE-2022-49438

Input: sparcspkr - fix refcount leak in bbc_beep_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: sparcspkr - fix refcount leak in bbc_beep_probe

of_find_node_by_path() calls of_find_node_opts_by_path(), which returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9c1a5077fdca99356c891af37931e537dea874f5 to before 2f51db16cb740ff90086189a1ef2581eab665591Affected 9c1a5077fdca99356c891af37931e537dea874f5 to before f13064b0f2c651a3fbb0749932795c6fd21556a8Affected 9c1a5077fdca99356c891af37931e537dea874f5 to before 353bc58ac6c782d4dcde9136a91d1f90867938feAffected 9c1a5077fdca99356c891af37931e537dea874f5 to before bbc2b0ce6042dd3117827f10ea8cb67e0ab786daAffected 9c1a5077fdca99356c891af37931e537dea874f5 to before 6e07ccc7d56130f760d23f67a70c45366c07debcAffected 9c1a5077fdca99356c891af37931e537dea874f5 to before 418b6a3e12f75638abc5673eb76cb32127d0ab13Affected 9c1a5077fdca99356c891af37931e537dea874f5 to before 73d6f42d8d86648bec2e73d34fe1648cb6d23e08Affected 9c1a5077fdca99356c891af37931e537dea874f5 to before 1124e39fea0e2fdb4202f95b716cb97cc7de7cc7Affected 9c1a5077fdca99356c891af37931e537dea874f5 to before c8994b30d71d64d5dcc9bc0edbfdf367171aa96fAffected
LinuxLinux	2.6.26Affected before 2.6.26Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

9c1a5077fdca99356c891af37931e537dea874f5 to before 2f51db16cb740ff90086189a1ef2581eab665591Affected
9c1a5077fdca99356c891af37931e537dea874f5 to before f13064b0f2c651a3fbb0749932795c6fd21556a8Affected
9c1a5077fdca99356c891af37931e537dea874f5 to before 353bc58ac6c782d4dcde9136a91d1f90867938feAffected
9c1a5077fdca99356c891af37931e537dea874f5 to before bbc2b0ce6042dd3117827f10ea8cb67e0ab786daAffected
9c1a5077fdca99356c891af37931e537dea874f5 to before 6e07ccc7d56130f760d23f67a70c45366c07debcAffected
9c1a5077fdca99356c891af37931e537dea874f5 to before 418b6a3e12f75638abc5673eb76cb32127d0ab13Affected
9c1a5077fdca99356c891af37931e537dea874f5 to before 73d6f42d8d86648bec2e73d34fe1648cb6d23e08Affected
9c1a5077fdca99356c891af37931e537dea874f5 to before 1124e39fea0e2fdb4202f95b716cb97cc7de7cc7Affected
9c1a5077fdca99356c891af37931e537dea874f5 to before c8994b30d71d64d5dcc9bc0edbfdf367171aa96fAffected

LinuxLinux

2.6.26Affected
before 2.6.26Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.