CVE-2022-49712: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() will check NULL pointer.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=3.5<4.9.320 | |
| Linux Kernel | >=4.10<4.14.285 | |
| Linux Kernel | >=4.15<4.19.249 | |
| Linux Kernel | >=4.20<5.4.200 | |
| Linux Kernel | >=5.5<5.10.124 | |
| Linux Kernel | >=5.11<5.15.49 | |
| Linux Kernel | >=5.16<5.18.6 | |
| Linux Kernel | =5.19-rc1 | |
| Linux Kernel | =5.19-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/d85e4e6284a91aa2d1ab004e9d84b9c09b4aa203
- https://git.kernel.org/stable/c/0ef6917c0524da5b88496b9706628ffef108b9bb
- https://git.kernel.org/stable/c/2a598da14856ead80c726b38ba426c68637d9211
- https://git.kernel.org/stable/c/b75bddfcc18170ce8e3fb695a76ec2dec4ce0ea5
- https://git.kernel.org/stable/c/57901c658f77d9ea2e772f35cb38e47efb54c558
- https://git.kernel.org/stable/c/46da1e4a8b6329479433b2a4056941dfdd7f3efd
- https://git.kernel.org/stable/c/727c82d003e0ec64411fd1257a9a57de4ad7a99a
- https://git.kernel.org/stable/c/4757c9ade34178b351580133771f510b5ffcf9c8
Frequently Asked Questions
What is the severity of CVE-2022-49712?
CVE-2022-49712 has a moderate severity level due to its potential impact on system stability.
How do I fix CVE-2022-49712?
To fix CVE-2022-49712, update your Linux kernel to a version that includes the patch for this vulnerability.
What systems are affected by CVE-2022-49712?
CVE-2022-49712 affects multiple versions of the Linux kernel ranging from 3.5 up to versions before 5.19-rc2.
What does CVE-2022-49712 exploit?
CVE-2022-49712 exploits a reference count leak in the lpc32xx_udc_probe function within the Linux kernel.
Is there a workaround for CVE-2022-49712?
A specific workaround is not provided; the recommended action is to apply the appropriate kernel updates.
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/type
- agent/title
- agent/references
- agent/author
- agent/source
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel
- version/linux kernel/3.5
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/5.19-rc1
- version/linux kernel/5.19-rc2