CVE-2022-49681

xtensa: xtfpga: Fix refcount leak bug in setup

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

xtensa: xtfpga: Fix refcount leak bug in setup

In machine_setup(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	33c760fbb7a8fa46314437746dd7f5540da5498e to before b12d5c52f073a0420622aaf2f21b615cce8b36ccAffected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 35d7e961be68732eb3acaeba81fb81ca16eafd05Affected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 0715d0e60052662c3f225342062f174dd721d1c7Affected 33c760fbb7a8fa46314437746dd7f5540da5498e to before a52972ee706b438302eb0350e61f378eb191e3d1Affected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 6c0839cf1b9e1b3c88da6af76794583cbfae8da3Affected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 0162451723178602c37f0555d235dfa17e486112Affected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 9b30c5c8884eda3f541229899671cebbad15979bAffected 33c760fbb7a8fa46314437746dd7f5540da5498e to before 173940b3ae40114d4179c251a98ee039dc9cd5b3Affected
LinuxLinux	3.8Affected before 3.8Not affected 4.9.321 through 4.9.Not affected 4.14.286 through 4.14.Not affected 4.19.250 through 4.19.Not affected 5.4.202 through 5.4.Not affected 5.10.127 through 5.10.Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

33c760fbb7a8fa46314437746dd7f5540da5498e to before b12d5c52f073a0420622aaf2f21b615cce8b36ccAffected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 35d7e961be68732eb3acaeba81fb81ca16eafd05Affected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 0715d0e60052662c3f225342062f174dd721d1c7Affected
33c760fbb7a8fa46314437746dd7f5540da5498e to before a52972ee706b438302eb0350e61f378eb191e3d1Affected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 6c0839cf1b9e1b3c88da6af76794583cbfae8da3Affected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 0162451723178602c37f0555d235dfa17e486112Affected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 9b30c5c8884eda3f541229899671cebbad15979bAffected
33c760fbb7a8fa46314437746dd7f5540da5498e to before 173940b3ae40114d4179c251a98ee039dc9cd5b3Affected

LinuxLinux

3.8Affected
before 3.8Not affected
4.9.321 through 4.9.*Not affected
4.14.286 through 4.14.*Not affected
4.19.250 through 4.19.*Not affected
5.4.202 through 5.4.*Not affected
5.10.127 through 5.10.*Not affected
5.15.51 through 5.15.*Not affected
5.18.8 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.