CVE-2022-49463

thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

of_find_node_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 8bbf522a2c51ef939d0e8835e236bfcd252193afAffected e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 3ade442ea5d3512a3c67984489ab4d8a6fb3b29fAffected e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 0ec10303c10833c1bcba7a1bde2f297e494d5464Affected e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before ec0925b731697db7cab5944a3e55d2d58bb3d075Affected e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 09700c504d8e63faffd2a2235074e8c5d130cb8fAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 8bbf522a2c51ef939d0e8835e236bfcd252193afAffected
e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 3ade442ea5d3512a3c67984489ab4d8a6fb3b29fAffected
e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 0ec10303c10833c1bcba7a1bde2f297e494d5464Affected
e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before ec0925b731697db7cab5944a3e55d2d58bb3d075Affected
e20db70dba1c0783b9878ce37171ad560b1ebaf3 to before 09700c504d8e63faffd2a2235074e8c5d130cb8fAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.