CVE-2022-49482

ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before c933829cbf3338b684869e6c4c8931abf5d68fbdAffected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before d42601e93fce7802bb8d70dd59b60cfeefa20469Affected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 30d110ca703ce60162ec337aa564a3e4da30715fAffected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 18b907ff0ae4bf20120aae1538f7156b9d08e3a7Affected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 2a0da7641e1f17a744ac7b3f76471388c97b63dcAffected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 24491124406666bf0dcb9ee10c5575c6ce6a1730Affected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 4e2a1bcc51bdebed48176f6e88c150f175983f9cAffected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before d855505851ee8ba666eb204149b49f906130dc17Affected
  • 08641c7c74dddfcd726512edfaa3b4cbe42e523e to before 2be84f73785fa9ed6443e3c5b158730266f1c2eeAffected
LinuxLinux
  • 3.5Affected
  • before 3.5Not affected
  • 4.9.318 through 4.9.*Not affected
  • 4.14.283 through 4.14.*Not affected
  • 4.19.247 through 4.19.*Not affected
  • 5.4.198 through 5.4.*Not affected
  • 5.10.121 through 5.10.*Not affected
  • 5.15.46 through 5.15.*Not affected
  • 5.17.14 through 5.17.*Not affected
  • 5.18.3 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.