CVE-2022-49397

phy: qcom-qmp: fix struct clk leak on probe errors

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:11 AM UTC
Updated: June 17, 2026 at 05:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error (e.g. probe deferral).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 4.14.2834.12 ≤ v < 4.19.2474.12 ≤ v < 5.10.1214.12 ≤ v < 5.15.464.12 ≤ v < 5.17.144.12 ≤ v < 5.18.34.12 ≤ v < 5.194.12 ≤ v < 5.4.1984.15 ≤ v < 4.19.2474.20 ≤ v < 5.4.1985.11 ≤ v < 5.15.465.16 ≤ v < 5.17.145.18 ≤ v < 5.18.35.5 ≤ v < 5.10.1214.12e78f3d15e115e8e764d4b1562b4fa538f2e22f6b
Vendor states this is fixed in 1668ad103679306ba2ef37f758d704e58a3ef1a0 (fixed)
Vendor states this is fixed in 621a4bcfb7aa031e7760d7b156bad7a45df58387 (fixed)
Vendor states this is fixed in 6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4 (fixed)
Vendor states this is fixed in ad9b0fad02f9b3a06ad5ac7df11f244e316a6254 (fixed)
Vendor states this is fixed in b246695636a861a09f0e2cde92bb2dd8f114f024 (fixed)
Vendor states this is fixed in b999d48b0869b8599de532ff6081575a7ab5358a (fixed)
Vendor states this is fixed in f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df (fixed)
Vendor states this is fixed in f8d23895a41243c6a8dbf392e531fff9497bb023 (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 4.14.283 (unaffected)
Vendor states this is fixed in 4.19.247 (unaffected)
Vendor states this is fixed in 5.10.121 (unaffected)
Vendor states this is fixed in 5.15.46 (unaffected)
Vendor states this is fixed in 5.17.14 (unaffected)
Vendor states this is fixed in 5.18.3 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4.198 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card