CVE-2022-49591

net: dsa: microchip: ksz_common: Fix refcount leak bug

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: microchip: ksz_common: Fix refcount leak bug

In ksz_switch_register(), we should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	912aae27c6af6605eae967ab540c5e26bd76d421 to before 88ec2ff42da3ac93b2437dc52fe25cd4372148e6Affected 912aae27c6af6605eae967ab540c5e26bd76d421 to before 4165e02716518bbbe9c9104b39530d40928bc7ceAffected 912aae27c6af6605eae967ab540c5e26bd76d421 to before a14bd7475452c51835dd5a0cee4c8fa48dd0b539Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.