CVE-2022-49431

powerpc/iommu: Add missing of_node_put in iommu_init_early_dart

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 02:12 AM UTC

Updated: June 17, 2026 at 05:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Add missing of_node_put in iommu_init_early_dart The device_node pointer is returned by of_find_compatible_node with refcount incremented. We should use of_node_put() to avoid the refcount leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.4.1982.6.12 ≤ v < 5.10.1212.6.12 ≤ v < 5.15.462.6.12 ≤ v < 5.17.142.6.12 ≤ v < 5.18.32.6.12 ≤ v < 5.192.6.12 ≤ v < 5.4.1985.11 ≤ v < 5.15.465.16 ≤ v < 5.17.145.18 ≤ v < 5.18.35.5 ≤ v < 5.10.1211da177e4c3f41524e886b7f1b8a0c1fc7321cac2 2.6.12

Vendor states this is fixed in 57b742a5b8945118022973e6416b71351df512fb (fixed)

Vendor states this is fixed in 7e3f1dfb9e21733d7276bc9ccea4daada163f2ba (fixed)

Vendor states this is fixed in 8657e8ea23325949091da72453ba84fb73cc2bd9 (fixed)

Vendor states this is fixed in cb4f2dc513e99c5d0485661f114e4dda73612d10 (fixed)

Vendor states this is fixed in df6d8b689252c0acc0448d4ae3d33f2d6db048ab (fixed)

Vendor states this is fixed in dfc308d6f29aa28463deb9a12278a85a382385ca (fixed)

Vendor states this is fixed in 2.6.12 (unaffected)

Vendor states this is fixed in 5.10.121 (unaffected)

Vendor states this is fixed in 5.15.46 (unaffected)

Vendor states this is fixed in 5.17.14 (unaffected)

Vendor states this is fixed in 5.18.3 (unaffected)

Vendor states this is fixed in 5.19 (unaffected)