CVE-2022-49644

drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

If drm_connector_init fails, intel_connector_free will be called to take care of proper free. So it is necessary to drop the refcount of port before intel_connector_free.

(cherry picked from commit cea9ed611e85d36a05db52b6457bf584b7d969e2)

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 72f231b9a88abcfac9f5ddaa1a0aacb3f9f87ba5Affected 091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 592f3bad00b7e2a95a6fb7a4f9e742c061c9c3c1Affected 091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 505114dda5bbfd07f4ce9a2df5b7d8ef5f2a1218Affected 091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before a91522b4279bebb098106a19b91f82b9c3213be9Affected 091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 85144df9ff4652816448369de76897c57cbb1b93Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.4.207 through 5.4.Not affected 5.10.132 through 5.10.Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 72f231b9a88abcfac9f5ddaa1a0aacb3f9f87ba5Affected
091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 592f3bad00b7e2a95a6fb7a4f9e742c061c9c3c1Affected
091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 505114dda5bbfd07f4ce9a2df5b7d8ef5f2a1218Affected
091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before a91522b4279bebb098106a19b91f82b9c3213be9Affected
091a4f91942a4396c67e5747f5cb38c6396d1fc5 to before 85144df9ff4652816448369de76897c57cbb1b93Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.4.207 through 5.4.*Not affected
5.10.132 through 5.10.*Not affected
5.15.56 through 5.15.*Not affected
5.18.13 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.