PT-2025-8301 · Linux+2 · Linux Kernel+2
Miaoqian Lin
·
Published
2025-02-26
·
Updated
2025-04-16
·
CVE-2022-49367
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A refcount leak issue has been identified in the Linux kernel, specifically in the
mv88e6xxx mdios register function. The of get child by name() function returns a node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed. However, in mv88e6xxx mdio register(), the device node is passed to of mdiobus register() and not released afterwards, resulting in a refcount leak.Recommendations
To resolve this issue, apply the fix that adds the missing
of node put() call to avoid the refcount leak.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse