CVE-2022-49678
published 2025-02-26CVE-2022-49678: In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
of_find_matching_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
In brcmstb_init_sram, it pass dn to of_address_to_resource(),
of_address_to_resource() will call of_find_device_by_node() to take
reference, so we should release the reference returned by
of_find_matching_node().
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < 4f5877bdf7b593e988f1924f4c3df6523f80b39c | 4f5877bdf7b593e988f1924f4c3df6523f80b39c |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < 734a4d15142bb4c8ecad2d8ec70d7564e78ae34d | 734a4d15142bb4c8ecad2d8ec70d7564e78ae34d |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < 30bbfeb480ae8b5ee43199d72417b232590440c2 | 30bbfeb480ae8b5ee43199d72417b232590440c2 |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < 10ba9d499a9fd82ed40897e734ba19870a879407 | 10ba9d499a9fd82ed40897e734ba19870a879407 |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < dcafd5463d8f20c4f90ddc138a5738adb99f74c8 | dcafd5463d8f20c4f90ddc138a5738adb99f74c8 |
| linux | linux | >= 0b741b8234c86065fb6954d32d427b3f7e14756f < 37d838de369b07b596c19ff3662bf0293fdb09ee | 37d838de369b07b596c19ff3662bf0293fdb09ee |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.15 < 4.19.250 | 4.19.250 |
| linux | linux_kernel | >= 4.20 < 5.4.202 | 5.4.202 |
| linux | linux_kernel | >= 5.11 < 5.15.51 | 5.15.51 |
| linux | linux_kernel | >= 5.16 < 5.18.8 | 5.18.8 |
| linux | linux_kernel | >= 5.5 < 5.10.127 | 5.10.127 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49678 [MEDIUM] CWE-402 kernel: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
kernel: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
In the Linux kernel, the following vulnerability has been resolved:
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
of_find_matching_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
In brcmstb_init_sram, it pass dn to of_address_to_resource(),
of_address_to_resource() will call of_find_device_by_node() to take
reference, so we should release the reference returned by
of_find_matching_node().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Packag
Debian
CVE-2022-49678: linux - In the Linux kernel, the following vulnerability has been resolved: soc: bcm: b...
vendor_debian·2022·CVSS 5.5
CVE-2022-49678 [MEDIUM] CVE-2022-49678: linux - In the Linux kernel, the following vulnerability has been resolved: soc: bcm: b...
In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. In brcmstb_init_sram, it pass dn to of_address_to_resource(), of_address_to_resource() will call of_find_device_by_node() to take reference, so we should release the reference returned by of_find_matching_node().
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.127-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
GHSA
GHSA-fj7c-j8wh-8xgw: In the Linux kernel, the following vulnerability has been resolved:
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
of_find_mat
ghsa_unreviewed·2025-03-12
CVE-2022-49678 [MEDIUM] GHSA-fj7c-j8wh-8xgw: In the Linux kernel, the following vulnerability has been resolved:
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
of_find_mat
In the Linux kernel, the following vulnerability has been resolved:
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
of_find_matching_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Add missing of_node_put() to avoid refcount leak.
In brcmstb_init_sram, it pass dn to of_address_to_resource(),
of_address_to_resource() will call of_find_device_by_node() to take
reference, so we should release the reference returned by
of_find_matching_node().
OSV
CVE-2022-49678: In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_match
osv·2025-02-26·CVSS 5.5
CVE-2022-49678 [MEDIUM] CVE-2022-49678: In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_match
In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. In brcmstb_init_sram, it pass dn to of_address_to_resource(), of_address_to_resource() will call of_find_device_by_node() to take reference, so we should release the reference returned by of_find_matching_node().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/10ba9d499a9fd82ed40897e734ba19870a879407https://git.kernel.org/stable/c/30bbfeb480ae8b5ee43199d72417b232590440c2https://git.kernel.org/stable/c/37d838de369b07b596c19ff3662bf0293fdb09eehttps://git.kernel.org/stable/c/4f5877bdf7b593e988f1924f4c3df6523f80b39chttps://git.kernel.org/stable/c/734a4d15142bb4c8ecad2d8ec70d7564e78ae34dhttps://git.kernel.org/stable/c/dcafd5463d8f20c4f90ddc138a5738adb99f74c8
2025-02-26
Published