PT-2025-8078 · Linux+1 · Linux Kernel+1

Published 2025-02-26 · Updated 2025-03-03 · CVE-2022-49150

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak was found in the gamecube rtc read offset from sram function. The of find compatible node() function returns a node pointer with refcount incremented, but the refcount is not released when done. This issue can be resolved by adding the missing of node put() to release the refcount.

Recommendations For the affected Linux kernel version, add the missing of node put() to release the refcount in the gamecube rtc read offset from sram function to fix the refcount leak.

Exploit

Fix

Related Identifiers

CVE-2022-49150

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49150.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49150 · Security Note
• https://git.kernel.org/stable/c/4b2dc39ca024990abe36ad5d145c4fe0c06afd34 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49150 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49150 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49150 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49150 · Security Note
• https://git.kernel.org/stable/c/de66e4f28dfd11f954966c447b4430529ed040a2 · Patch
• https://git.kernel.org/linus/4b2dc39ca024990abe36ad5d145c4fe0c06afd34 · Note
• https://twitter.com/CVEnew/status/1896414965101470046 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note