First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This is similar to commit 64b92de9603f ("ASoC: wcd9335: fix a leaked reference by adding missing of_node_put")
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | ||
Linux Kernel | >=5.6<5.10.110 | |
Linux Kernel | >=5.11<5.15.33 | |
Linux Kernel | >=5.16<5.16.19 | |
Linux Kernel | >=5.17<5.17.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-49239 has a medium severity level due to the risk of a reference count issue that could lead to a resource leak.
CVE-2022-49239 affects Linux Kernel versions from 5.6 to 5.17.2, including specific ranges between 5.10.110, 5.11, 5.15.33, and 5.16.19.
To fix CVE-2022-49239, update the Linux Kernel to a version that is not affected, beyond 5.17.2.
CVE-2022-49239 is a coding vulnerability related to improper handling of device node pointers in the ASoC codec subsystem.
Users of the affected Linux Kernel versions may experience resource management issues due to the improper handling of reference counts.