CVE-2022-49679

ARM: Fix refcount leak in axxia_boot_secondary

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: Fix refcount leak in axxia_boot_secondary

of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1d22924e1c4e299337e86e290c02c3e3eb43b608 to before a9b76c232a1ce4cbf27862097f7eb634dcc779ebAffected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before b385cb59aac8d61c29bc72ebf3d19a536914af96Affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 71e12e5b02674459a24f16e965255d63b31fe049Affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 29ca9c4efacccdc15104a8d4bf10b5183fc92840Affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 44a5b3a073e5aaa5720929dba95b2725eb32bb65Affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 4d9c60e868f7cf8e09956e7d5bb44d807d712699Affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 3c19fe3f04f4f4e7a2b722c2fd3c98356fc1d72bAffected 1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 7c7ff68daa93d8c4cdea482da4f2429c0398fcdeAffected
LinuxLinux	3.16Affected before 3.16Not affected 4.9.321 through 4.9.Not affected 4.14.286 through 4.14.Not affected 4.19.250 through 4.19.Not affected 5.4.202 through 5.4.Not affected 5.10.127 through 5.10.Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

1d22924e1c4e299337e86e290c02c3e3eb43b608 to before a9b76c232a1ce4cbf27862097f7eb634dcc779ebAffected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before b385cb59aac8d61c29bc72ebf3d19a536914af96Affected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 71e12e5b02674459a24f16e965255d63b31fe049Affected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 29ca9c4efacccdc15104a8d4bf10b5183fc92840Affected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 44a5b3a073e5aaa5720929dba95b2725eb32bb65Affected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 4d9c60e868f7cf8e09956e7d5bb44d807d712699Affected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 3c19fe3f04f4f4e7a2b722c2fd3c98356fc1d72bAffected
1d22924e1c4e299337e86e290c02c3e3eb43b608 to before 7c7ff68daa93d8c4cdea482da4f2429c0398fcdeAffected

LinuxLinux

3.16Affected
before 3.16Not affected
4.9.321 through 4.9.*Not affected
4.14.286 through 4.14.*Not affected
4.19.250 through 4.19.*Not affected
5.4.202 through 5.4.*Not affected
5.10.127 through 5.10.*Not affected
5.15.51 through 5.15.*Not affected
5.18.8 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.