PT-2025-8045 · Linux+1 · Linux Kernel+1

Hangyu Hua + 1 · Published 2022-03-01 · Updated 2025-03-03 · CVE-2022-49117

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the ill acc of setup() function related to the MIPS architecture and Ralink setup. The issue arises when pdev equals NULL, and of node put(np) is not called, leading to a resource leak.

Recommendations For the affected Linux kernel versions, ensure that of node put(np) is called when pdev equals NULL in the ill acc of setup() function to fix the refcount leak issue.

Exploit

Fix

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2026-01256

CVE-2022-49117

Affected Products

Astra Linux

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49117.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49117 · Security Note
• https://git.kernel.org/stable/c/142ae7d4f21524acfe073e5a3da5667aa85eb970 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49117 · Vendor Advisory
• https://git.kernel.org/stable/c/060a485df4ec1183d543317511cb4caa43468b5d · Patch
• https://git.kernel.org/stable/c/8d7f7ef7980f287ace1c15f2ac03d6754e12f071 · Patch
• https://git.kernel.org/stable/c/c74c755daed551b9aceb8388159180861474bdfe · Patch
• https://osv.dev/vulnerability/CVE-2022-49117 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01256 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49117 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49117 · Vendor Advisory
• https://git.kernel.org/stable/c/4a0a1436053b17e50b7c88858fb0824326641793 · Patch
• https://ubuntu.com/security/CVE-2022-49117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49117 · Security Note
• https://git.kernel.org/stable/c/5fb47ca3490813d3884d8ad0b2ce511aa3537551 · Patch