Back
CVE-2022-49679
ARM: Fix refcount leak in axxia_boot_secondary
Medium5.5EPSS 0.27%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ARM: Fix refcount leak in axxia_boot_secondary of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
- CWE-noinfo Not enough information
Affected products
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < a9b76c232a1ce4cbf27862097f7eb634dcc779eb
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < b385cb59aac8d61c29bc72ebf3d19a536914af96
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 71e12e5b02674459a24f16e965255d63b31fe049
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 29ca9c4efacccdc15104a8d4bf10b5183fc92840
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 44a5b3a073e5aaa5720929dba95b2725eb32bb65
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 4d9c60e868f7cf8e09956e7d5bb44d807d712699
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 3c19fe3f04f4f4e7a2b722c2fd3c98356fc1d72b
- affected 1d22924e1c4e299337e86e290c02c3e3eb43b608 – < 7c7ff68daa93d8c4cdea482da4f2429c0398fcde
- affected 3.16
- unaffected < 3.16
- unaffected 4.9.321 – ≤ 4.9.*
- unaffected 4.14.286 – ≤ 4.14.*
- unaffected 4.19.250 – ≤ 4.19.*
- unaffected 5.4.202 – ≤ 5.4.*
- unaffected 5.10.127 – ≤ 5.10.*
- unaffected 5.15.51 – ≤ 5.15.*
- unaffected 5.18.8 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (8)
- https://git.kernel.org/stable/c/a9b76c232a1ce4cbf27862097f7eb634dcc779eb (opens in a new tab)
- https://git.kernel.org/stable/c/b385cb59aac8d61c29bc72ebf3d19a536914af96 (opens in a new tab)
- https://git.kernel.org/stable/c/71e12e5b02674459a24f16e965255d63b31fe049 (opens in a new tab)
- https://git.kernel.org/stable/c/29ca9c4efacccdc15104a8d4bf10b5183fc92840 (opens in a new tab)
- https://git.kernel.org/stable/c/44a5b3a073e5aaa5720929dba95b2725eb32bb65 (opens in a new tab)
- https://git.kernel.org/stable/c/4d9c60e868f7cf8e09956e7d5bb44d807d712699 (opens in a new tab)
- https://git.kernel.org/stable/c/3c19fe3f04f4f4e7a2b722c2fd3c98356fc1d72b (opens in a new tab)
- https://git.kernel.org/stable/c/7c7ff68daa93d8c4cdea482da4f2429c0398fcde (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49679)Record last updated .