CVE-2022-49609

power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before b4d224eec96a18fa8959512cd9e5b6a50bd16a41Affected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before a9ed3ad3a8d1dfbc829d86edb3236873a315db11Affected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 6689754b121bd487f99680280102b3a5cd7374afAffected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 78bdf732cf5d74d1c6ecda06830a91f80a4aef6fAffected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 493ceca3271316e74639c89ff8ac35883de64256Affected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 71ab83ac65e2d671552374123bf920c1d698335aAffected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 49fa778ee044b00471dd9ccae5f6a121fffea1acAffected 0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 80192eff64eee9b3bc0594a47381937b94b9d65aAffected
LinuxLinux	3.18Affected before 3.18Not affected 4.9.325 through 4.9.Not affected 4.14.290 through 4.14.Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before b4d224eec96a18fa8959512cd9e5b6a50bd16a41Affected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before a9ed3ad3a8d1dfbc829d86edb3236873a315db11Affected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 6689754b121bd487f99680280102b3a5cd7374afAffected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 78bdf732cf5d74d1c6ecda06830a91f80a4aef6fAffected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 493ceca3271316e74639c89ff8ac35883de64256Affected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 71ab83ac65e2d671552374123bf920c1d698335aAffected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 49fa778ee044b00471dd9ccae5f6a121fffea1acAffected
0e545f57b708630c54c8c5c24ea7f7034f6c40d9 to before 80192eff64eee9b3bc0594a47381937b94b9d65aAffected

LinuxLinux

3.18Affected
before 3.18Not affected
4.9.325 through 4.9.*Not affected
4.14.290 through 4.14.*Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.