CVE-2022-49454

PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()

The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add the missing of_node_put() to release the refcount.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	87e8657ba99cac87b84c7f8ead91b44d88345504 to before ad1c9d13e04509ae24fae8dd2897148657323519Affected 87e8657ba99cac87b84c7f8ead91b44d88345504 to before 4cef4237d6c37257cb6ddc397723e9c0dded0efeAffected 87e8657ba99cac87b84c7f8ead91b44d88345504 to before 09b2d906d78ddf5042b1f3e0091835fc6997e8a4Affected 87e8657ba99cac87b84c7f8ead91b44d88345504 to before 214e0d8fe4a813ae6ffd62bc2dfe7544c20914f4Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.