CVE-2022-49113

powerpc/secvar: fix refcount leak in format_show()

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 01:54 AM UTC

Updated: June 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/secvar: fix refcount leak in format_show() Refcount leak will happen when format_show returns failure in multiple cases. Unified management of of_node_put can fix this problem.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.10.1115.11 ≤ v < 5.15.345.16 ≤ v < 5.16.205.17 ≤ v < 5.17.35.5 ≤ v < 5.10.1115.5 ≤ v < 5.15.345.5 ≤ v < 5.16.205.5 ≤ v < 5.17.35.5 ≤ v < 5.185.5bd5d9c743d38f67d64ea1b512a461f6b5a5f6bec

Vendor states this is fixed in 02222bf4f0a27f6eba66d1f597cdb5daadd51829 (fixed)

Vendor states this is fixed in 2a71e3ecd829a82013cf095c55068c61d991e885 (fixed)

Vendor states this is fixed in c105ffb6b9744158e37e9f81f0f38861951d1c1f (fixed)

Vendor states this is fixed in d05e4265d33af60b39606c20c731e3e719bfe3d6 (fixed)

Vendor states this is fixed in d601fd24e6964967f115f036a840f4f28488f63f (fixed)

Vendor states this is fixed in 5.10.111 (unaffected)

Vendor states this is fixed in 5.15.34 (unaffected)

Vendor states this is fixed in 5.16.20 (unaffected)

Vendor states this is fixed in 5.17.3 (unaffected)

Vendor states this is fixed in 5.18 (unaffected)

Vendor states this is fixed in 5.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references