PT-2025-8172 · Linux+2 · Linux Kernel+2
Published
2022-03-08
·
Updated
2025-04-14
·
CVE-2022-49244
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue in the Linux kernel's ASoC subsystem, specifically in the mt8192-mt6359 driver, has been identified. The problem arises from incorrect error handling in the
mt8192 mt6359 dev probe function. The of parse phandle() function returns a device node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed. However, of node put() is only called in the regular execution path, leading to a refcount leak in error paths.Recommendations
For the affected Linux kernel versions, ensure that the
of node put() function is called in both regular and error handling paths of the mt8192 mt6359 dev probe function to prevent refcount leaks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse