Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf of_graph_get_remote_node() returns remote device node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Patchwork: https://patchwork.freedesktop.org/patch/488473/
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.12, < 5.4.202 |
References
- https://git.kernel.org/stable/c/3c39a17197733bc37786ed68c83267c2f491840bPatch
- https://git.kernel.org/stable/c/b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0Patch
- https://git.kernel.org/stable/c/d1592d3e362cc59b29f15019707b16c695d70ca3Patch
- https://git.kernel.org/stable/c/d16a4339825e64f9ddcdff5277982d640bae933bPatch
- https://git.kernel.org/stable/c/d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1dPatch
FAQ
What is CVE-2022-49693?
CVE-2022-49693 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf of_graph_get_remote_node() returns remote device node pointer with refco...
How severe is CVE-2022-49693?
CVE-2022-49693 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49693?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.