CVE-2022-49439

powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 51e25fbf20c9152d84a34b7afac15a41fe5c9116Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 5b8aa2ba38c010f47c965dd9bb5a8561813ed649Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 46fd994763cf6884b88a2da712af918f3ed54d7bAffected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 7b668a59ddfb32727e39b06fdf52b28e58c684e0Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before c70dd353d37158e06bf8d450d4b31a7091609924Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 5607a77a365df8c0fd5ff43ac424812b95775527Affected abc3aeae3aaa5c319d02f12649e17ea5929999aa to before fcee96924ba1596ca80a6770b2567ca546f9a482Affected
LinuxLinux	3.3Affected before 3.3Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 51e25fbf20c9152d84a34b7afac15a41fe5c9116Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 5b8aa2ba38c010f47c965dd9bb5a8561813ed649Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 46fd994763cf6884b88a2da712af918f3ed54d7bAffected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 7b668a59ddfb32727e39b06fdf52b28e58c684e0Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before c70dd353d37158e06bf8d450d4b31a7091609924Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before 5607a77a365df8c0fd5ff43ac424812b95775527Affected
abc3aeae3aaa5c319d02f12649e17ea5929999aa to before fcee96924ba1596ca80a6770b2567ca546f9a482Affected

LinuxLinux

3.3Affected
before 3.3Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.