IT

Tracker / CVE-2022-49242

CVE-2022-49242

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe This function only calls of_node_put() in the regular path. And it will cause refcount leak in error paths. For example, when codec_np is NULL, saif_np[0] and saif_np[1] are not NULL, it will cause leaks. of_node_put() will check if the node pointer is NULL, so we can call it directly to release the refcount of regular pointers.

Affected products and versions

linux linux_kernel · 3.5 → 4.9.311
linux linux_kernel · 4.10 → 4.14.276
linux linux_kernel · 4.15 → 4.19.238
linux linux_kernel · 4.20 → 5.4.189
linux linux_kernel · 5.11 → 5.15.33
linux linux_kernel · 5.16 → 5.16.19
linux linux_kernel · 5.17 → 5.17.2
linux linux_kernel · 5.5 → 5.10.110

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References