CVE-2022-49712: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe
ofparsephandle() returns a node pointer with refcount incremented, we should use ofnodeput() on it when not need anymore. Add missing ofnodeput() to avoid refcount leak. ofnodeput() will check NULL pointer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49712?
CVE-2022-49712 has a moderate severity level due to its potential impact on system stability.
How do I fix CVE-2022-49712?
To fix CVE-2022-49712, update your Linux kernel to a version that includes the patch for this vulnerability.
What systems are affected by CVE-2022-49712?
CVE-2022-49712 affects multiple versions of the Linux kernel ranging from 3.5 up to versions before 5.19-rc2.
What does CVE-2022-49712 exploit?
CVE-2022-49712 exploits a reference count leak in the lpc32xx_udc_probe function within the Linux kernel.
Is there a workaround for CVE-2022-49712?
A specific workaround is not provided; the recommended action is to apply the appropriate kernel updates.