CVE-2022-49683

iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client

of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ef04070692a21633ec6a60f80c19b6af44b3cf47 to before 501652a2ad5450b4908e1f204ce75b2414c305b7Affected ef04070692a21633ec6a60f80c19b6af44b3cf47 to before ab7bf025cee89db73c649216ddd2bc589c3d3862Affected ef04070692a21633ec6a60f80c19b6af44b3cf47 to before 5eaa84e1605035a90a64d25b6cba79e89d188175Affected ef04070692a21633ec6a60f80c19b6af44b3cf47 to before ada7b0c0dedafd7d059115adf49e48acba3153a8Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.127 through 5.10.Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.