CVE-2022-48820: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
Published Jul 16, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
phy: stm32: fix a refcount leak in stm32usbphycpllenable()
This error path needs to decrement "usbphyc->npllcons.counter" before returning.
Affected Software
5 affected components
Linux Linux kernel>=5.12<5.15.24
Linux Linux kernel>=5.16<5.16.10
Linux Linux kernel=5.17-rc1
Linux Linux kernel=5.17-rc2
Linux Linux kernel=5.17-rc3
Remediation
Event History
Jul 16, 2024
CVE Published
via MITRE·11:44 AM
Data Sourced
via MITRE·11:44 AM
Description
Data Sourced
via NVD·12:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-48820?
CVE-2022-48820 is classified as a low-severity vulnerability affecting the Linux kernel.
2
What does CVE-2022-48820 impact?
CVE-2022-48820 affects the STM32 USB PHY controller in specific versions of the Linux kernel.
3
How do I fix CVE-2022-48820?
To resolve CVE-2022-48820, update to a patched version of the Linux kernel that addresses the refcount leak.
4
Who is affected by CVE-2022-48820?
Users running versions of the Linux kernel between 5.12 and 5.15.24, or certain 5.17 release candidates are affected by CVE-2022-48820.
5
What type of vulnerability is CVE-2022-48820?
CVE-2022-48820 is a refcount leak vulnerability in the Linux kernel.