CVE-2022-49652

dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore.

Add missing of_node_put() in to fix this.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 452b9dfd7aca96befce22634fadb111737f22bbeAffected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 61b4ef19c346dc21ab1d4f39f5c412e3037b2bdcAffected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 3bd66010398871807c1cebacee07d60ded1b1402Affected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before b31ab132561c7f1b6459039152b8d09e44eb3565Affected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 37147e22cd8dfc0412495cb361708836157a4486Affected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before cb9813d7eae917acd34436160a278b8b5d48ca53Affected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before b5a817f8d62e9e13280928f3756e54854ae4962eAffected ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before c132fe78ad7b4ce8b5d49a501a15c29d08eeb23aAffected
LinuxLinux	4.5Affected before 4.5Not affected 4.9.323 through 4.9.Not affected 4.14.288 through 4.14.Not affected 4.19.252 through 4.19.Not affected 5.4.205 through 5.4.Not affected 5.10.130 through 5.10.Not affected 5.15.54 through 5.15.Not affected 5.18.11 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 452b9dfd7aca96befce22634fadb111737f22bbeAffected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 61b4ef19c346dc21ab1d4f39f5c412e3037b2bdcAffected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 3bd66010398871807c1cebacee07d60ded1b1402Affected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before b31ab132561c7f1b6459039152b8d09e44eb3565Affected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before 37147e22cd8dfc0412495cb361708836157a4486Affected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before cb9813d7eae917acd34436160a278b8b5d48ca53Affected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before b5a817f8d62e9e13280928f3756e54854ae4962eAffected
ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e to before c132fe78ad7b4ce8b5d49a501a15c29d08eeb23aAffected

LinuxLinux

4.5Affected
before 4.5Not affected
4.9.323 through 4.9.*Not affected
4.14.288 through 4.14.*Not affected
4.19.252 through 4.19.*Not affected
5.4.205 through 5.4.*Not affected
5.10.130 through 5.10.*Not affected
5.15.54 through 5.15.*Not affected
5.18.11 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.