Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in aries_audio_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. If extcon_find_edev_by_node() fails, it doesn't call of_node_put() Calling of_node_put() after extcon_find_edev_by_node() to fix this.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.9, < 5.10.121 |
References
- https://git.kernel.org/stable/c/46d1b310a2d571811c4e08041ce287babb60b86aPatch
- https://git.kernel.org/stable/c/70130bde3457d28c02c76b6cacc5d40a72dd6e17Patch
- https://git.kernel.org/stable/c/85d899f396622d3034643bf89615a78f9be7c91aPatch
- https://git.kernel.org/stable/c/bf4a9b2467b775717d0e9034ad916888e19713a3Patch
- https://git.kernel.org/stable/c/cacea459f95be22b3750f3b25b7a1c5897a68206Patch
FAQ
What is CVE-2022-49477?
CVE-2022-49477 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in aries_audio_probe of_parse_phandle() returns a node pointer with refcount incremented, we shou...
How severe is CVE-2022-49477?
CVE-2022-49477 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49477?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.