CVE-2022-49477

ASoC: samsung: Fix refcount leak in aries_audio_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: samsung: Fix refcount leak in aries_audio_probe

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. If extcon_find_edev_by_node() fails, it doesn't call of_node_put() Calling of_node_put() after extcon_find_edev_by_node() to fix this.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before cacea459f95be22b3750f3b25b7a1c5897a68206Affected 7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 85d899f396622d3034643bf89615a78f9be7c91aAffected 7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 70130bde3457d28c02c76b6cacc5d40a72dd6e17Affected 7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 46d1b310a2d571811c4e08041ce287babb60b86aAffected 7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before bf4a9b2467b775717d0e9034ad916888e19713a3Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before cacea459f95be22b3750f3b25b7a1c5897a68206Affected
7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 85d899f396622d3034643bf89615a78f9be7c91aAffected
7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 70130bde3457d28c02c76b6cacc5d40a72dd6e17Affected
7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before 46d1b310a2d571811c4e08041ce287babb60b86aAffected
7a3a7671fa6c7e90aff5f4242add2a40587b85ef to before bf4a9b2467b775717d0e9034ad916888e19713a3Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.