Riskcovery

CVE-2022-49752

device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()

State
Published
Severity
5.5 Medium
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()

The 'parent' returned by fwnode_graph_get_port_parent() with refcount incremented when 'prev' is not NULL, it needs be put when finish using it.

Because the parent is const, introduce a new variable to store the returned fwnode, then put it before returning from fwnode_graph_get_next_endpoint().

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 91b31ca76300fd36d5049c5879e68dfb3edc7a5c to before e0472947bead3af94cc968ce35fc0414803a2f65Affected
  • b5b41ab6b0c1bb70fe37a0d193006c969e3b5909 to before 7701a4bd45c11f9a289d8f262fad05705a012339Affected
  • b5b41ab6b0c1bb70fe37a0d193006c969e3b5909 to before e75485fc589ec729cc182aa9b41dfb6c15ae6f6eAffected
  • b5b41ab6b0c1bb70fe37a0d193006c969e3b5909 to before 39af728649b05e88a2b40e714feeee6451c3f18eAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.91 through 5.15.*Not affected
  • 6.1.9 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.