CVE-2022-48961

published 2024-10-21

CVE-2022-48961: In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdio_device_release() There is warning…

Priority P4 16 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

There is warning report about of_node refcount leak
while probing mdio device:

OF: ERROR: memory leak, expected refcount 1 instead of 2,
of_node_get()/of_node_put() unbalanced - destroy cset entry:
attach overlay node /spi/soc@0/mdio@710700c0/ethernet@4

In of_mdiobus_register_device(), we increase fwnode refcount
by fwnode_handle_get() before associating the of_node with
mdio device, but it has never been decreased in normal path.
Since that, in mdio_device_release(), it needs to call
fwnode_handle_put() in addition instead of calling kfree()
directly.

After above, just calling mdio_device_free() in the error handle
path of of_mdiobus_register_device() is enough to keep the
refcount balanced.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= a9049e0c513c4521dbfaa302af8ed08b3366b41f < 16854177745a5648f8ec322353b432e18460f43a	16854177745a5648f8ec322353b432e18460f43a
linux	linux	>= a9049e0c513c4521dbfaa302af8ed08b3366b41f < a5c6de1a6656b8cc6bce7cb3d9874dd7df4968c3	a5c6de1a6656b8cc6bce7cb3d9874dd7df4968c3
linux	linux	>= a9049e0c513c4521dbfaa302af8ed08b3366b41f < cb37617687f2bfa5b675df7779f869147c9002bd	cb37617687f2bfa5b675df7779f869147c9002bd
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 4.5 < 5.15.83	5.15.83
linux	linux_kernel	>= 5.16 < 6.0.13	6.0.13

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401