CVE-2022-49652

dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. Add missing of_node_put() in to fix this.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/452b9dfd7aca96befce22634fadb111737f22bbe	patch
https://git.kernel.org/stable/c/61b4ef19c346dc21ab1d4f39f5c412e3037b2bdc	patch
https://git.kernel.org/stable/c/3bd66010398871807c1cebacee07d60ded1b1402	patch
https://git.kernel.org/stable/c/b31ab132561c7f1b6459039152b8d09e44eb3565	patch
https://git.kernel.org/stable/c/37147e22cd8dfc0412495cb361708836157a4486	patch
https://git.kernel.org/stable/c/cb9813d7eae917acd34436160a278b8b5d48ca53	patch
https://git.kernel.org/stable/c/b5a817f8d62e9e13280928f3756e54854ae4962e	patch
https://git.kernel.org/stable/c/c132fe78ad7b4ce8b5d49a501a15c29d08eeb23a	patch

Frequently Asked Questions

What is the severity of CVE-2022-49652?: CVE-2022-49652 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49652?: To fix CVE-2022-49652, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49652 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49652 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49652?: CVE-2022-49652 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.