PT-2025-8171 · Linux+2 · Linux Kernel+2

Published 2022-03-07 · Updated 2025-04-15 · CVE-2022-49243

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak issue has been identified in the Linux kernel, specifically in the ASoC atmel driver. The problem arises from a missing of node put() call in the at91sam9g20ek audio probe function, which is necessary to avoid a refcount leak because the of parse phandle() function returns a node pointer with an incremented refcount.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-03663

CVE-2022-49243

OESA-2025-1336

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1376

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49243.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5 · Patch
• https://git.kernel.org/stable/c/f590797fa3c1bccdd19e55441592a23b46aef449 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49292 · Security Note
• https://git.kernel.org/stable/c/f8b7b9a0594715ecfbe6f18db2328d992242654a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49508 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49625 · Security Note
• https://git.kernel.org/stable/c/32e6ceb05f36432811753852c674a301f944a24b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49381 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47659 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49535 · Security Note
• https://git.kernel.org/stable/c/81f266396237cea09a8c6322a6a78535f06ed345 · Patch
• https://git.kernel.org/stable/c/662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec · Patch