CVE-2022-49693

drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf

of_graph_get_remote_node() returns remote device node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Patchwork: https://patchwork.freedesktop.org/patch/488473/

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d1592d3e362cc59b29f15019707b16c695d70ca3Affected 86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d16a4339825e64f9ddcdff5277982d640bae933bAffected 86418f90a4c1a0073db65d8a1e2bf94421117a60 to before 3c39a17197733bc37786ed68c83267c2f491840bAffected 86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1dAffected 86418f90a4c1a0073db65d8a1e2bf94421117a60 to before b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.4.202 through 5.4.Not affected 5.10.127 through 5.10.Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d1592d3e362cc59b29f15019707b16c695d70ca3Affected
86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d16a4339825e64f9ddcdff5277982d640bae933bAffected
86418f90a4c1a0073db65d8a1e2bf94421117a60 to before 3c39a17197733bc37786ed68c83267c2f491840bAffected
86418f90a4c1a0073db65d8a1e2bf94421117a60 to before d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1dAffected
86418f90a4c1a0073db65d8a1e2bf94421117a60 to before b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.4.202 through 5.4.*Not affected
5.10.127 through 5.10.*Not affected
5.15.51 through 5.15.*Not affected
5.18.8 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.