CVE-2022-50777
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.14.303, 4.10, 4.19
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4.14.74 · fixed in 4.14.303; From 4.9.131 · fixed in 4.10; From 4.18.12 · fixed in 4.19
- Linux Linux
4.19
References 8
git.kernel.org
- stable/c/53526dbc8aa6b95e9fc2ab1e29b1a9145721da24
- stable/c/78b0b1ff525d9be4babf5a148a4de0d50042d95d
- stable/c/00616bd1913a4f879679e02dc08c2f501ca2bd4c
- stable/c/106d0d33c9d1ec4ddeeffc1fdc717ff09953d4ed
- stable/c/4d112f001612c79927c1ecf29522b34c4fa292e0
- stable/c/52841e71253e6ace72751c72560950474a57d04c
- stable/c/ee84d37a5f08ed1121cdd16f8f3ed87552087a21
- stable/c/d039535850ee47079d59527e96be18d8e0daa84b