CVE-2022-49447 - ARM: hisi: Add missing of_node_put after of_find_compatible_node · CoreCVE

Back Back to CVE browser

MEDIUM

ARM: hisi: Add missing of_node_put after of_find_compatible_node

Published Feb 26, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

of_find_compatible_node will increment the refcount of the returned device_node. Calling of_node_put() to avoid the refcount leak

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  3.14
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <3.14
- Version
  4.14.283
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.247
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  4.9.318
  Status
  unaffected
  Constraints
  <=4.9.*
- Version
  5.10.121
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.46
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.17.14
  Status
  unaffected
  Constraints
  <=5.17.*
- Version
  5.18.3
  Status
  unaffected
  Constraints
  <=5.18.*
- Version
  5.19
  Status
  unaffected
  Constraints
  <=*
- Version
  5.4.198
  Status
  unaffected
  Constraints
  <=5.4.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

affected

Version	Status	Constraints
3.14	affected	-
0	unaffected	<3.14
4.14.283	unaffected	<=4.14.*
4.19.247	unaffected	<=4.19.*
4.9.318	unaffected	<=4.9.*
5.10.121	unaffected	<=5.10.*
5.15.46	unaffected	<=5.15.*
5.17.14	unaffected	<=5.17.*
5.18.3	unaffected	<=5.18.*
5.19	unaffected	<=*
5.4.198	unaffected	<=5.4.*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-401

References (15)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-49447		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2347843		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-54782		Advisory
https://git.kernel.org/stable/c/21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6d		Patch
https://git.kernel.org/stable/c/45d211668d33c49d73f5213e8c2b58468108647c		Patch
https://git.kernel.org/stable/c/46cb7868811d025c3d29c10d18b3422db1cf20d5		Patch
https://git.kernel.org/stable/c/9bc72e47d4630d58a840a66a869c56b29554cfe4		Patch
https://git.kernel.org/stable/c/a3265a9440030068547a20dfee646666f3ca5278		Patch
https://git.kernel.org/stable/c/cafaaae4bb9ce84a2791fa29bf6907a9466c3883		Patch
https://git.kernel.org/stable/c/dd4be8ecfb41a29e7c4e551b4e866157ce4a3429		Patch
https://git.kernel.org/stable/c/e109058165137ef42841abd989f080adfefa14fa		Patch
https://git.kernel.org/stable/c/f8da78b2bae1f54746647a2bb44f8bd6025c57af		Patch
https://lore.kernel.org/linux-cve-announce/2025022658-CVE-2022-49447-4819@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49447
https://www.cve.org/CVERecord?id=CVE-2022-49447

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Linux

Published Feb 26, 2025

Updated May 11, 2026

Reserved Feb 26, 2025

Link CVE-2022-49447

CISA Vulnrichment

Updated Oct 1, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-49447

Severity Low

Public date Feb 26, 2025

Links CVE-2022-49447 - Bugzilla

Assigner Linux

Published Feb 26, 2025

Updated May 11, 2026

Exploited since n/a

Link EUVD-2022-54782

EUVD-2022-54782