cbcvebase.
CVE-2022-49354
published 2025-02-26

CVE-2022-49354: In the Linux kernel, the following vulnerability has been resolved: ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe of_find_device_by_node() takes…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
19.0th percentile
In the Linux kernel, the following vulnerability has been resolved: ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() to avoid refcount leak.

Affected

24 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 7bd85c5ba1687daf54e3b6907673c3604b1e75cf7bd85c5ba1687daf54e3b6907673c3604b1e75cf
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < a4d3e5f1d7d4f8b5e3834fec0f057a762c55806ba4d3e5f1d7d4f8b5e3834fec0f057a762c55806b
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 8d8ad067b90f231b8fdb14acee673ca4012f60458d8ad067b90f231b8fdb14acee673ca4012f6045
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < d5a1e7f33c88780b279835d63665d7e38ccb671fd5a1e7f33c88780b279835d63665d7e38ccb671f
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 19cb3ece14547cb1ca2021798aaf49a3f82643d119cb3ece14547cb1ca2021798aaf49a3f82643d1
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 888312dc297a8a103f6371ef668c7e04f57a7679888312dc297a8a103f6371ef668c7e04f57a7679
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < c9782e1b21bee4b783a64b2a91e7e71406c21a21c9782e1b21bee4b783a64b2a91e7e71406c21a21
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < fb2cb409b504bb3a69e65a17f3120328c8e50219fb2cb409b504bb3a69e65a17f3120328c8e50219
linuxlinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75 < 10d6bdf532902be1d8aa5900b3c03c5671612aa210d6bdf532902be1d8aa5900b3c03c5671612aa2
linuxlinux_kernel——
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 3.8 < 4.9.3184.9.318
linuxlinux_kernel>= 4.10 < 4.14.2834.14.283
linuxlinux_kernel>= 4.15 < 4.19.2474.19.247
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.475.15.47
linuxlinux_kernel>= 5.16 < 5.17.155.17.15
linuxlinux_kernel>= 5.18 < 5.18.45.18.4
linuxlinux_kernel>= 5.5 < 5.10.1225.10.122

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.