CVE-2022-49243

ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 01:56 AM UTC
Updated: June 17, 2026 at 05:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.8 ≤ v < 4.14.2763.8 ≤ v < 4.19.2383.8 ≤ v < 4.9.3113.8 ≤ v < 5.10.1103.8 ≤ v < 5.15.333.8 ≤ v < 5.16.193.8 ≤ v < 5.17.23.8 ≤ v < 5.183.8 ≤ v < 5.4.1894.10 ≤ v < 4.14.2764.15 ≤ v < 4.19.2384.20 ≤ v < 5.4.1895.11 ≤ v < 5.15.335.16 ≤ v < 5.16.195.17 ≤ v < 5.17.25.5 ≤ v < 5.10.1103.8531f67e41dcde1e358cf821d056241a66355cf03
Vendor states this is fixed in 0325193cf40dc3a6e27d55a5b98680936deebcd0 (fixed)
Vendor states this is fixed in 32e6ceb05f36432811753852c674a301f944a24b (fixed)
Vendor states this is fixed in 4793a02deb31b71b3984abc67bf1011a03c13b18 (fixed)
Vendor states this is fixed in 662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec (fixed)
Vendor states this is fixed in 81f266396237cea09a8c6322a6a78535f06ed345 (fixed)
Vendor states this is fixed in a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5 (fixed)
Vendor states this is fixed in b0c56a0071116a37c24df998166c22a7e4684626 (fixed)
Vendor states this is fixed in f590797fa3c1bccdd19e55441592a23b46aef449 (fixed)
Vendor states this is fixed in f8b7b9a0594715ecfbe6f18db2328d992242654a (fixed)
Vendor states this is fixed in 3.8 (unaffected)
Vendor states this is fixed in 4.14.276 (unaffected)
Vendor states this is fixed in 4.19.238 (unaffected)
Vendor states this is fixed in 4.9.311 (unaffected)
Vendor states this is fixed in 5.10.110 (unaffected)
Vendor states this is fixed in 5.15.33 (unaffected)
Vendor states this is fixed in 5.16.19 (unaffected)
Vendor states this is fixed in 5.17.2 (unaffected)
Vendor states this is fixed in 5.18 (unaffected)
Vendor states this is fixed in 5.4.189 (unaffected)

References (9)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0325193cf40dc3a6e27d55a5b98680936deebcd0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/32e6ceb05f36432811753852c674a301f944a24b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4793a02deb31b71b3984abc67bf1011a03c13b18
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/81f266396237cea09a8c6322a6a78535f06ed345
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b0c56a0071116a37c24df998166c22a7e4684626
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f590797fa3c1bccdd19e55441592a23b46aef449

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card