CVE-2022-49716

irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions

of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. When kcalloc fails, it missing of_node_put() and results in refcount leak. Fix this by goto out_put_node label.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 58e67c81e229351027d28c610638378606e33a08Affected 52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 7c9dd9d23f26dabcfb14148b9acdfba540418b19Affected 52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 0b325d993995a321f6ab4e6c51f0504ec092bf5bAffected 52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before c83c34c57798fc41faefcf078be78683db2f4bebAffected 52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before ec8401a429ffee34ccf38cebf3443f8d5ae6cb0dAffected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.200 through 5.4.Not affected 5.10.124 through 5.10.Not affected 5.15.49 through 5.15.Not affected 5.18.6 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 58e67c81e229351027d28c610638378606e33a08Affected
52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 7c9dd9d23f26dabcfb14148b9acdfba540418b19Affected
52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before 0b325d993995a321f6ab4e6c51f0504ec092bf5bAffected
52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before c83c34c57798fc41faefcf078be78683db2f4bebAffected
52085d3f2028d853f8d6ce7ead2f8a504f6077fa to before ec8401a429ffee34ccf38cebf3443f8d5ae6cb0dAffected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.200 through 5.4.*Not affected
5.10.124 through 5.10.*Not affected
5.15.49 through 5.15.*Not affected
5.18.6 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.