PT-2025-8089 · Linux+1 · Linux Kernel+1

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49161

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel's ASoC: mediatek component has been identified, specifically in the mt8183 da7219 max98357 dev probe function. The problem arises from the of parse phandle() function returning a device node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed. However, of node put() is only called in the regular execution path, leading to a refcount leak in error handling paths.

Recommendations For the affected Linux kernel versions, to resolve the issue, ensure that of node put() is called in both the regular and error handling paths of the mt8183 da7219 max98357 dev probe function to prevent refcount leaks.

Exploit

Fix

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-01533

CVE-2022-49161

Affected Products

Debian

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49161.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49161 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01533 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49161 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49161 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49161 · Vendor Advisory
• https://git.kernel.org/stable/c/9b9f6227e8d0c7c46b6d9d7b8a5c4e0536049fcf · Patch
• https://ubuntu.com/security/CVE-2022-49161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49161 · Security Note
• https://git.kernel.org/stable/c/28a265a1ee11febeec5ea73a804f30dcec3181ca · Patch
• https://cve.org/CVERecord?id=CVE-2022-49161 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49161 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49161 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/cveNotify/136161 · Telegram Post