CVE-2022-48656
dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
MEDIUM 5.5
At a glance
- Source
- NVD
- EPSS
- EPSS 0.26 % · percentile 18 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() We should call of_node_put() for the reference returned by of_parse_phandle() in fail path or when it is not used anymore. Here we only need to move the of_node_put() before the check.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-51351
- GCVE · GCVE-0-2022-48656
CERT-FR advisories
- CERTFR-2024-AVI-0420 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.6.0 < 5.10.146cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.15.71cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16.0 < 5.19.12
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected d702419134133db1eab2067dc6ea5723467fd917 < aa11dae059a439af82bae541b134f8f53ac177b5 ; affected d702419134133db1eab2067dc6ea5723467fd917 < dd5a6c5a08752b613e83ad2cb5133e72a64b876d ; affected d702419134133db1eab2067dc6ea5723467fd917 < a17df55bf6d536712da6902a83db82b82e67d5a2 ; affected d702419134133db1eab2067dc6ea5723467fd917 < f9fdb0b86f087c2b7f6c6168dd0985a3c1eda87e |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 5.10.146 ≤ 5.10.* ; unaffected 5.15.71 ≤ 5.15.* ; unaffected 5.19.12 ≤ 5.19.* ; unaffected 6.0 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |