CVE-2022-49719

irqchip/gic/realview: Fix refcount leak in realview_gic_of_init

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic/realview: Fix refcount leak in realview_gic_of_init

of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 87da903ce632d5689bef66d56ee5dae700d82104Affected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 486f68f85085d9b16ae097679b1486dcb1b6eb69Affected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before b634af84bc1edece4e63317b0ad95618dd3a8693Affected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 56526c3883fc7a1f5898b1d40a02c8b8685a5d92Affected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before e52a58b79f11755ea7e877015c4a1704303fa55fAffected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 5d38720661a4b9c87705c206a6081177ffb8ec1dAffected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 16b603cb8d34c2d917983918db1f88c8b831baaaAffected 82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before f4b98e314888cc51486421bcf6d52852452ea48bAffected
LinuxLinux	4.6Affected before 4.6Not affected 4.9.320 through 4.9.Not affected 4.14.285 through 4.14.Not affected 4.19.249 through 4.19.Not affected 5.4.200 through 5.4.Not affected 5.10.124 through 5.10.Not affected 5.15.49 through 5.15.Not affected 5.18.6 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 87da903ce632d5689bef66d56ee5dae700d82104Affected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 486f68f85085d9b16ae097679b1486dcb1b6eb69Affected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before b634af84bc1edece4e63317b0ad95618dd3a8693Affected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 56526c3883fc7a1f5898b1d40a02c8b8685a5d92Affected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before e52a58b79f11755ea7e877015c4a1704303fa55fAffected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 5d38720661a4b9c87705c206a6081177ffb8ec1dAffected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before 16b603cb8d34c2d917983918db1f88c8b831baaaAffected
82b0a434b436f5da69ddd24bd6a6fa5dc4484310 to before f4b98e314888cc51486421bcf6d52852452ea48bAffected

LinuxLinux

4.6Affected
before 4.6Not affected
4.9.320 through 4.9.*Not affected
4.14.285 through 4.14.*Not affected
4.19.249 through 4.19.*Not affected
5.4.200 through 5.4.*Not affected
5.10.124 through 5.10.*Not affected
5.15.49 through 5.15.*Not affected
5.18.6 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.