PT-2025-8169 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49241

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel's ASoC atmel module has been identified, specifically in the sam9x5 wm8731 driver probe function. The problem arises from incorrect error handling, leading to a refcount leak when of parse phandle() returns a device node pointer with an incremented refcount. This leak occurs because of node put() is only called in the regular path, not in the error path.

Recommendations For the affected Linux kernel versions, consider applying a patch that ensures of node put() is called in both the regular and error paths of the sam9x5 wm8731 driver probe function to prevent refcount leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49241

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1329

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49241.json · Exploit
• https://git.kernel.org/stable/c/f43ad5dc43240289f4cf13c16cc506f4f7087931 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49241 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49241 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49241 · Vendor Advisory
• https://git.kernel.org/stable/c/f589063b585ac6dd2081bde6c145411cf48d8d92 · Patch
• https://ubuntu.com/security/CVE-2022-49241 · Vendor Advisory
• https://git.kernel.org/stable/c/90ac679aa6a01841da90ec5a4aaa4b5e0badddf0 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49241 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49241 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/14228225091a0854b1de23e5b4fe8bdeeca9683b · Patch