CVE-2022-48859 - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr

MEDIUM

net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr

Published Jul 16, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

This node pointer is returned by of_find_compatible_node() with refcount incremented. Calling of_node_put() to aovid the refcount leak.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-401

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48859		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2298203		Issue Tracking
https://git.kernel.org/stable/c/4cc66bf17220ff9631f9fa99b02a872e0ad5a08b		Patch
https://git.kernel.org/stable/c/b7c2fd1d126329340639adfb8dd2938fe4b65df7		Patch
https://git.kernel.org/stable/c/c9ffa3e2bc451816ce0295e40063514fabf2bd36		Patch
https://lore.kernel.org/linux-cve-announce/2024071627-CVE-2022-48859-4427@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48859
https://www.cve.org/CVERecord?id=CVE-2022-48859