CVE-2022-49887

media: meson: vdec: fix possible refcount leak in vdec_probe()

State: Published
Severity: 5.5 Medium
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: meson: vdec: fix possible refcount leak in vdec_probe()

v4l2_device_unregister need to be called to put the refcount got by v4l2_device_register when vdec_probe fails or vdec_remove is called.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3e7f51bd96077acad6acd7b45668f65b44233c4e to before 70119756311a0be3b95bec2e1ba714673e90febaAffected 3e7f51bd96077acad6acd7b45668f65b44233c4e to before be6e22f54623d8a856a4f167b25be73c2ff1ff80Affected 3e7f51bd96077acad6acd7b45668f65b44233c4e to before f96ad391d054bd5c36994f98afd6a12cbb5600bfAffected 3e7f51bd96077acad6acd7b45668f65b44233c4e to before 0457e7b12ece1a7e41fa0ae8b7e47c0a72a83befAffected 3e7f51bd96077acad6acd7b45668f65b44233c4e to before 7718999356234d9cc6a11b4641bb773928f1390fAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.224 through 5.4.Not affected 5.10.154 through 5.10.Not affected 5.15.78 through 5.15.Not affected 6.0.8 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

3e7f51bd96077acad6acd7b45668f65b44233c4e to before 70119756311a0be3b95bec2e1ba714673e90febaAffected
3e7f51bd96077acad6acd7b45668f65b44233c4e to before be6e22f54623d8a856a4f167b25be73c2ff1ff80Affected
3e7f51bd96077acad6acd7b45668f65b44233c4e to before f96ad391d054bd5c36994f98afd6a12cbb5600bfAffected
3e7f51bd96077acad6acd7b45668f65b44233c4e to before 0457e7b12ece1a7e41fa0ae8b7e47c0a72a83befAffected
3e7f51bd96077acad6acd7b45668f65b44233c4e to before 7718999356234d9cc6a11b4641bb773928f1390fAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.224 through 5.4.*Not affected
5.10.154 through 5.10.*Not affected
5.15.78 through 5.15.*Not affected
6.0.8 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.