CVE-2022-49457

ARM: versatile: Add missing of_node_put in dcscb_init

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: versatile: Add missing of_node_put in dcscb_init

The device_node pointer is returned by of_find_compatible_node with refcount incremented. We should use of_node_put() to avoid the refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 2d7b23db35254b7d46e852967090c64cdccf24daAffected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before bbdfb7d4f036118d36415a2575efa6f5246505aeAffected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before a0fc05cd17617e63fc13ad0c01f3f0afd890d8ecAffected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before fcd1999ba97445a12cc394f5f42ffd9116bf0185Affected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before d146e2a9864ade19914494de3fb520390b415d58Affected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 83c329b980bddbc8c6a3d287d91f2103a4d4a860Affected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 3c6006faed9aba5144b33176d061031a9be66954Affected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before d6de7b181c29cd4578ec139aafb5eac062abbe1bAffected 1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 23b44f9c649bbef10b45fa33080cd8b4166800aeAffected
LinuxLinux	3.11Affected before 3.11Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 2d7b23db35254b7d46e852967090c64cdccf24daAffected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before bbdfb7d4f036118d36415a2575efa6f5246505aeAffected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before a0fc05cd17617e63fc13ad0c01f3f0afd890d8ecAffected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before fcd1999ba97445a12cc394f5f42ffd9116bf0185Affected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before d146e2a9864ade19914494de3fb520390b415d58Affected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 83c329b980bddbc8c6a3d287d91f2103a4d4a860Affected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 3c6006faed9aba5144b33176d061031a9be66954Affected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before d6de7b181c29cd4578ec139aafb5eac062abbe1bAffected
1e904e1bf6f1285cc2dd5696c44b7cf78cda643f to before 23b44f9c649bbef10b45fa33080cd8b4166800aeAffected

LinuxLinux

3.11Affected
before 3.11Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.