CVE-2022-49752

Katalog CVE

CVSS 5.5 · Medium EPSS 0,20%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() The 'parent' returned by fwnode_graph_get_port_parent() with refcount incremented when 'prev' is not NULL, it needs be put when finish using it. Because the parent is const, introduce a new variable to store the returned fwnode, then put it before returning from fwnode_graph_get_next_endpoint().

Rincian

Terbit di NVD

27 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/39af728649b05e88a2b40e714feeee6451c3f18e patch
• https://git.kernel.org/stable/c/7701a4bd45c11f9a289d8f262fad05705a012339 patch
• https://git.kernel.org/stable/c/e75485fc589ec729cc182aa9b41dfb6c15ae6f6e patch
• https://git.kernel.org/stable/c/e0472947bead3af94cc968ce35fc0414803a2f65