PT-2025-8388 · Linux+1 · Linux Kernel+1

Miaoqian Lin · Published 2025-02-26 · Updated 2025-02-28 · CVE-2022-49454

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak was found in the mtk pcie subsys powerup() function. The of find compatible node() function returns a node pointer with refcount incremented. To fix this issue, the missing of node put() function call was added to release the refcount.

Recommendations For the affected Linux kernel versions, add the missing of node put() call to the mtk pcie subsys powerup() function to release the refcount and fix the refcount leak.

Exploit

Fix

Related Identifiers

CVE-2022-49454

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49454.json · Exploit
• https://git.kernel.org/stable/c/214e0d8fe4a813ae6ffd62bc2dfe7544c20914f4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49454 · Vendor Advisory
• https://git.kernel.org/stable/c/4cef4237d6c37257cb6ddc397723e9c0dded0efe · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49454 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49454 · Vendor Advisory
• https://git.kernel.org/stable/c/ad1c9d13e04509ae24fae8dd2897148657323519 · Patch
• https://git.kernel.org/stable/c/09b2d906d78ddf5042b1f3e0091835fc6997e8a4 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49454 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49454 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49454 · Vendor Advisory
• https://git.kernel.org/linus/214e0d8fe4a813ae6ffd62bc2dfe7544c20914f4 · Note
• https://twitter.com/CVEnew/status/1895622714645229613 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note