PT-2025-8609 · Linux+2 · Linux Kernel+2

Miaoqian Lin · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49676

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory-related issue has been identified in the Linux kernel, specifically in the exynos5422-dmc driver. The problem arises from a refcount leak in the of get dram timings function, which occurs when the of parse phandle() function returns a node pointer with an incremented refcount. The function fails to call of node put() on this pointer in certain error paths, leading to the leak. This issue is resolved by adding a put node label and using goto to ensure proper cleanup in error cases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49676

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1328

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49676.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49676 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/889aad2203e09eed2071ca8985c25e9d6aea5735 · Patch
• https://git.kernel.org/stable/c/1332661e09304b7b8e84e5edc11811ba08d12abe · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49676 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/bb2a481778c60f912c363e271ae46b55ff8132db · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49676 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49676 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49676 · Vendor Advisory
• https://git.kernel.org/stable/c/cde4480b5ab06195b9164184b0c02ced71e601b4 · Patch