First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. am65_cpsw_init_cpts() and am65_cpsw_nuss_probe() don't release the refcount in error case. Add missing of_node_put() to avoid refcount leak.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | ||
Linux Kernel | >=5.7<5.10.122 | |
Linux Kernel | >=5.11<5.15.47 | |
Linux Kernel | >=5.16<5.17.15 | |
Linux Kernel | >=5.18<5.18.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-49386 is classified as having a moderate severity due to the potential for reference count leaks in the Linux kernel.
CVE-2022-49386 affects multiple versions of the Linux kernel ranging from 5.7 to 5.18.4.
The fix for CVE-2022-49386 involves updating the Linux kernel to a version that includes the patch addressing the reference count leaks.
The vulnerability CVE-2022-49386 impacts the Ethernet subsystem of the Linux kernel specifically related to the ti am65-cpsw-nuss.
CVE-2022-49386 is a reference counting vulnerability within the Linux kernel, which can lead to resource leaks.