CVE-2022-49517

ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe

This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8625c1dbd87631572f8e2c05bc67736b73d6f02f to before bc2afecaabd2a2c9f17e43b4793a30e3461bfb29Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 9345122f5fb9f97a206f440f38bb656e53f46912Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before c71494f5f2b444adfd992a7359a0d2a791642b39Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before f279c49f17ce10866087ea6c0c57382158974b63Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 61a85a20e8df5e0a92cfe169c92425c7bae0753bAffected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 318afb1442eeef089fe7f8a8297d97c0302ff6f6Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 94587aa17abf8b26f543d2b29c44abc21bc36836Affected 8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 05654431a18fe24e5e46a375d98904134628a102Affected
LinuxLinux	4.12Affected before 4.12Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

8625c1dbd87631572f8e2c05bc67736b73d6f02f to before bc2afecaabd2a2c9f17e43b4793a30e3461bfb29Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 9345122f5fb9f97a206f440f38bb656e53f46912Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before c71494f5f2b444adfd992a7359a0d2a791642b39Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before f279c49f17ce10866087ea6c0c57382158974b63Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 61a85a20e8df5e0a92cfe169c92425c7bae0753bAffected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 318afb1442eeef089fe7f8a8297d97c0302ff6f6Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 94587aa17abf8b26f543d2b29c44abc21bc36836Affected
8625c1dbd87631572f8e2c05bc67736b73d6f02f to before 05654431a18fe24e5e46a375d98904134628a102Affected

LinuxLinux

4.12Affected
before 4.12Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.