CVE-2022-49243

ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

N/A

CVSS

Severity:

EPSS 0.07%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/81f266396237cea09a8c6322a6a78535f06ed345
https://git.kernel.org/stable/c/f8b7b9a0594715ecfbe6f18db2328d992242654a
https://git.kernel.org/stable/c/b0c56a0071116a37c24df998166c22a7e4684626
https://git.kernel.org/stable/c/0325193cf40dc3a6e27d55a5b98680936deebcd0
https://git.kernel.org/stable/c/662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec
https://git.kernel.org/stable/c/a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5
https://git.kernel.org/stable/c/32e6ceb05f36432811753852c674a301f944a24b
https://git.kernel.org/stable/c/4793a02deb31b71b3984abc67bf1011a03c13b18
https://git.kernel.org/stable/c/f590797fa3c1bccdd19e55441592a23b46aef449

Frequently Asked Questions

What is the severity of CVE-2022-49243?: CVE-2022-49243 has not yet been assigned a CVSS score.
How to fix CVE-2022-49243?: To fix CVE-2022-49243, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49243 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49243 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49243?: CVE-2022-49243 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.