cbcvebase.
CVE-2022-49241
published 2025-02-26

CVE-2022-49241: In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe The device_node pointer is…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.2th percentile
In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.17.3-1 (bookworm)linux 5.17.3-1 (bookworm)
linuxlinux——
linuxlinux>= fdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 90ac679aa6a01841da90ec5a4aaa4b5e0badddf090ac679aa6a01841da90ec5a4aaa4b5e0badddf0
linuxlinux>= fdbcb3cba54b29a37dfe42acdc0e72c543e0807d < f589063b585ac6dd2081bde6c145411cf48d8d92f589063b585ac6dd2081bde6c145411cf48d8d92
linuxlinux>= fdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 14228225091a0854b1de23e5b4fe8bdeeca9683b14228225091a0854b1de23e5b4fe8bdeeca9683b
linuxlinux>= fdbcb3cba54b29a37dfe42acdc0e72c543e0807d < f43ad5dc43240289f4cf13c16cc506f4f7087931f43ad5dc43240289f4cf13c16cc506f4f7087931
linuxlinux>= fdbcb3cba54b29a37dfe42acdc0e72c543e0807d < 740dc3e846537c3743da98bf106f376023fd085c740dc3e846537c3743da98bf106f376023fd085c
linuxlinux_kernel>= 0 < 5.10.113-15.10.113-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 3.12 < 5.10.1105.10.110
linuxlinux_kernel>= 5.11 < 5.15.335.15.33
linuxlinux_kernel>= 5.16 < 5.16.195.16.19
linuxlinux_kernel>= 5.17 < 5.17.25.17.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.