cbcvebase.
CVE-2022-49462
published 2025-02-26

CVE-2022-49462: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init of_parse_phandle() returns a node pointer…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
18.1th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. a6xx_gmu_init() passes the node to of_find_device_by_node() and of_dma_configure(), of_find_device_by_node() will takes its reference, of_dma_configure() doesn't need the node after usage. Add missing of_node_put() to avoid refcount leak.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < 6832e36f156ea35a6ed74bca72727806116effdd6832e36f156ea35a6ed74bca72727806116effdd
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < 48e82ce8cdb19c20a5020fa446b286d6a147450c48e82ce8cdb19c20a5020fa446b286d6a147450c
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < edff4c1af831d0c02e654eed9da7d74174de49d5edff4c1af831d0c02e654eed9da7d74174de49d5
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < 65ddbc0d26824e2a5d6154d01d8cf3934490021365ddbc0d26824e2a5d6154d01d8cf39344900213
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < 06907a374f1b74f8f2fb30720dc6df81331e4fb506907a374f1b74f8f2fb30720dc6df81331e4fb5
linuxlinux>= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a < c56de483093d7ad0782327f95dda7da97bc4c315c56de483093d7ad0782327f95dda7da97bc4c315
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 4.19 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.