CVE-2022-49447

ARM: hisi: Add missing of_node_put after of_find_compatible_node

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: hisi: Add missing of_node_put after of_find_compatible_node

of_find_compatible_node will increment the refcount of the returned device_node. Calling of_node_put() to avoid the refcount leak

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a9434e96d9f089e778b440217f815c8e85daf317 to before 46cb7868811d025c3d29c10d18b3422db1cf20d5Affected a9434e96d9f089e778b440217f815c8e85daf317 to before f8da78b2bae1f54746647a2bb44f8bd6025c57afAffected a9434e96d9f089e778b440217f815c8e85daf317 to before dd4be8ecfb41a29e7c4e551b4e866157ce4a3429Affected a9434e96d9f089e778b440217f815c8e85daf317 to before e109058165137ef42841abd989f080adfefa14faAffected a9434e96d9f089e778b440217f815c8e85daf317 to before 21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6dAffected a9434e96d9f089e778b440217f815c8e85daf317 to before a3265a9440030068547a20dfee646666f3ca5278Affected a9434e96d9f089e778b440217f815c8e85daf317 to before cafaaae4bb9ce84a2791fa29bf6907a9466c3883Affected a9434e96d9f089e778b440217f815c8e85daf317 to before 45d211668d33c49d73f5213e8c2b58468108647cAffected a9434e96d9f089e778b440217f815c8e85daf317 to before 9bc72e47d4630d58a840a66a869c56b29554cfe4Affected
LinuxLinux	3.14Affected before 3.14Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

a9434e96d9f089e778b440217f815c8e85daf317 to before 46cb7868811d025c3d29c10d18b3422db1cf20d5Affected
a9434e96d9f089e778b440217f815c8e85daf317 to before f8da78b2bae1f54746647a2bb44f8bd6025c57afAffected
a9434e96d9f089e778b440217f815c8e85daf317 to before dd4be8ecfb41a29e7c4e551b4e866157ce4a3429Affected
a9434e96d9f089e778b440217f815c8e85daf317 to before e109058165137ef42841abd989f080adfefa14faAffected
a9434e96d9f089e778b440217f815c8e85daf317 to before 21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6dAffected
a9434e96d9f089e778b440217f815c8e85daf317 to before a3265a9440030068547a20dfee646666f3ca5278Affected
a9434e96d9f089e778b440217f815c8e85daf317 to before cafaaae4bb9ce84a2791fa29bf6907a9466c3883Affected
a9434e96d9f089e778b440217f815c8e85daf317 to before 45d211668d33c49d73f5213e8c2b58468108647cAffected
a9434e96d9f089e778b440217f815c8e85daf317 to before 9bc72e47d4630d58a840a66a869c56b29554cfe4Affected

LinuxLinux

3.14Affected
before 3.14Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.