CVE-2022-49682

xtensa: Fix refcount leak bug in time.c

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

xtensa: Fix refcount leak bug in time.c

In calibrate_ccount(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	205ad548a7426fb6813760cd9917d3fc24122576 to before 3e5eb904d9ba657308fc75a5de434b0e58dcb8d7Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before 7de4502af68f4f3932f450157f5483eb7b33cb74Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before f1eaf4ba5372ad111f687a80c67e270708e14c23Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before e5234a9d64a976abd134a14710dcd5188158a7c5Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before af0ff2da01521144bc11194f4c26485d7c9cee73Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before 0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before 0e403a383c14b63c86bd9df085b7e573e9caee64Affected 205ad548a7426fb6813760cd9917d3fc24122576 to before a0117dc956429f2ede17b323046e1968d1849150Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.9.321 through 4.9.Not affected 4.14.286 through 4.14.Not affected 4.19.250 through 4.19.Not affected 5.4.202 through 5.4.Not affected 5.10.127 through 5.10.Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

205ad548a7426fb6813760cd9917d3fc24122576 to before 3e5eb904d9ba657308fc75a5de434b0e58dcb8d7Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before 7de4502af68f4f3932f450157f5483eb7b33cb74Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before f1eaf4ba5372ad111f687a80c67e270708e14c23Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before e5234a9d64a976abd134a14710dcd5188158a7c5Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before af0ff2da01521144bc11194f4c26485d7c9cee73Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before 0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before 0e403a383c14b63c86bd9df085b7e573e9caee64Affected
205ad548a7426fb6813760cd9917d3fc24122576 to before a0117dc956429f2ede17b323046e1968d1849150Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.9.321 through 4.9.*Not affected
4.14.286 through 4.14.*Not affected
4.19.250 through 4.19.*Not affected
5.4.202 through 5.4.*Not affected
5.10.127 through 5.10.*Not affected
5.15.51 through 5.15.*Not affected
5.18.8 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.