PT-2025-8168 · Linux+1 · Linux Kernel+1

Published 2025-02-26 · Updated 2025-02-27 · CVE-2022-49240

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel's ASoC: mediatek: mt8195 module has been identified. The problem lies in the mt8195 mt6359 rt1019 rt5682 dev probe function, where error handling is flawed. Specifically, the device node pointer returned by of parse phandle() has its refcount incremented, but of node put() is only called in the regular path, not in the error path, leading to a refcount leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49240

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49240.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-49240 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49240 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49240 · Vendor Advisory
• https://git.kernel.org/stable/c/c4b7174fe5bb875a09a78674a14a1589d1a672f3 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49240 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49240 · Vendor Advisory
• https://git.kernel.org/stable/c/c652f8f0875b569f8afa80b8cf9762828fd6187b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49240 · Vendor Advisory
• https://git.kernel.org/linus/c4b7174fe5bb875a09a78674a14a1589d1a672f3 · Note
• https://twitter.com/CVEnew/status/1894573511068586202 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note