Back
CVE-2022-49396
phy: qcom-qmp: fix reset-controller leak on probe errors
Medium5.5EPSS 0.27%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error (e.g. probe deferral). Note that due to the reset controller being defined in devicetree in "lane" child nodes, devm_reset_control_get_exclusive() cannot be used directly.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < b7b5fbcaac5355e2e695dc0c08a0fcf248250388
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < a39d9eccb333b8c07c43ebea1c6dfda122378a0f
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < 7ac21b24af859c097eb4034e93430056068f8f31
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < 2156dc390402043ba5982489c6625adcb0b0975c
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < ba173a6f8d8dffed64bb13ab23081bdddfb464f0
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < feb05b10b3ed3ae21b851520a0d0b71685439517
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < 8c03eb0c8982677b4e17174073a011788891304d
- affected e78f3d15e115e8e764d4b1562b4fa538f2e22f6b – < 4d2900f20edfe541f75756a00deeb2ffe7c66bc1
- affected 4.12
- unaffected < 4.12
- unaffected 4.14.283 – ≤ 4.14.*
- unaffected 4.19.247 – ≤ 4.19.*
- unaffected 5.4.198 – ≤ 5.4.*
- unaffected 5.10.121 – ≤ 5.10.*
- unaffected 5.15.46 – ≤ 5.15.*
- unaffected 5.17.14 – ≤ 5.17.*
- unaffected 5.18.3 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (8)
- https://git.kernel.org/stable/c/b7b5fbcaac5355e2e695dc0c08a0fcf248250388 (opens in a new tab)
- https://git.kernel.org/stable/c/a39d9eccb333b8c07c43ebea1c6dfda122378a0f (opens in a new tab)
- https://git.kernel.org/stable/c/7ac21b24af859c097eb4034e93430056068f8f31 (opens in a new tab)
- https://git.kernel.org/stable/c/2156dc390402043ba5982489c6625adcb0b0975c (opens in a new tab)
- https://git.kernel.org/stable/c/ba173a6f8d8dffed64bb13ab23081bdddfb464f0 (opens in a new tab)
- https://git.kernel.org/stable/c/feb05b10b3ed3ae21b851520a0d0b71685439517 (opens in a new tab)
- https://git.kernel.org/stable/c/8c03eb0c8982677b4e17174073a011788891304d (opens in a new tab)
- https://git.kernel.org/stable/c/4d2900f20edfe541f75756a00deeb2ffe7c66bc1 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49396)Record last updated .