CVE-2022-49712
usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() will check NULL pointer.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.5
References 8
git.kernel.org
- stable/c/d85e4e6284a91aa2d1ab004e9d84b9c09b4aa203
- stable/c/0ef6917c0524da5b88496b9706628ffef108b9bb
- stable/c/2a598da14856ead80c726b38ba426c68637d9211
- stable/c/b75bddfcc18170ce8e3fb695a76ec2dec4ce0ea5
- stable/c/57901c658f77d9ea2e772f35cb38e47efb54c558
- stable/c/46da1e4a8b6329479433b2a4056941dfdd7f3efd
- stable/c/727c82d003e0ec64411fd1257a9a57de4ad7a99a
- stable/c/4757c9ade34178b351580133771f510b5ffcf9c8