PT-2025-8396 · Linux+2 · Linux Kernel+2

Miaoqian Lin

·

Published

2025-02-26

·

Updated

2025-04-15

·

CVE-2022-49462

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A refcount leak issue has been identified in the Linux kernel, specifically in the drm/msm/a6xx component. The of parse phandle() function returns a node pointer with an incremented refcount, which should be decremented using of node put() when no longer needed. In the a6xx gmu init() function, the node is passed to of find device by node() and of dma configure(), where of find device by node() takes a reference to the node, but of dma configure() does not require the node after its usage. This results in a refcount leak, which is resolved by adding a missing of node put() call.
Recommendations To resolve this issue, apply the patch that adds the missing of node put() call in the a6xx gmu init() function to avoid the refcount leak. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2022-49462
OPENSUSE-SU-2025_1263-1
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1
SUSE-SU-2025_1263-1

Affected Products

Astra Linux
Linux Kernel
Suse