CVE-2022-49212: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init The reference counting issue happens in several error handling paths on a refcounted object "nc->dmac". In these paths, the function simply returns the error code, forgetting to balance the reference count of "nc->dmac", increased earlier by dma_request_channel(), which may cause refcount leaks. Fix it by decrementing the refcount of specific object in those error paths.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=4.12<4.14.276 | |
| Linux Kernel | >=4.15<4.19.238 | |
| Linux Kernel | >=4.20<5.4.189 | |
| Linux Kernel | >=5.5<5.10.110 | |
| Linux Kernel | >=5.11<5.15.33 | |
| Linux Kernel | >=5.16<5.16.19 | |
| Linux Kernel | >=5.17<5.17.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0856bf27057561f42b37df111603cf5a0d040294
- https://git.kernel.org/stable/c/9843c9c98f26c6ad843260b19bfdaa2598f2ae1e
- https://git.kernel.org/stable/c/9b08d211db4c447eb1a07df65e45e0aa772e0fa6
- https://git.kernel.org/stable/c/a3587259ae553e41d1ce8c7435351a5d6b299a11
- https://git.kernel.org/stable/c/fe0e2ce5c87e9c0b9485ff566362030aa55972cf
- https://git.kernel.org/stable/c/8baea2b96fa90af8d0f937caf4cf2105ee094d93
- https://git.kernel.org/stable/c/f1694169f3674cdf7553aed06864254635679878
- https://git.kernel.org/stable/c/fecbd4a317c95d73c849648c406bcf1b6a0ec1cf
Frequently Asked Questions
What is the severity of CVE-2022-49212?
CVE-2022-49212 is categorized as a medium severity vulnerability due to its reference counting issue that can lead to potential resource leaks.
How do I fix CVE-2022-49212?
To fix CVE-2022-49212, you should update to the latest version of the Linux kernel where the vulnerability has been addressed.
Which versions of the Linux Kernel are affected by CVE-2022-49212?
CVE-2022-49212 affects various versions of the Linux kernel prior to the fix implemented in later updates.
What are the potential impacts of CVE-2022-49212?
The potential impacts of CVE-2022-49212 include resource leaks that could lead to degraded system performance or crashes.
Is CVE-2022-49212 exploitable remotely?
CVE-2022-49212 is not considered remotely exploitable as it primarily affects local privilege escalation through device interactions.
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/type
- agent/title
- agent/references
- agent/author
- agent/source
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/linux foundation
- canonical/linux kernel
- vendor/linux
- version/linux kernel/4.12
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/5.17