CVE-2022-49656 — ARM: meson: Fix refcount leak in meson_smp_prepare_cpus

Back Back to CVE browser

MEDIUM

ARM: meson: Fix refcount leak in meson_smp_prepare_cpus

Published Feb 26, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.15
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.15
- Version
  4.19.252
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.130
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.54
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.18.11
  Status
  unaffected
  Constraints
  <=5.18.*
- Version
  5.19
  Status
  unaffected
  Constraints
  <=*
- Version
  5.4.205
  Status
  unaffected
  Constraints
  <=5.4.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.15	affected	-
0	unaffected	<4.15
4.19.252	unaffected	<=4.19.*
5.10.130	unaffected	<=5.10.*
5.15.54	unaffected	<=5.15.*
5.18.11	unaffected	<=5.18.*
5.19	unaffected	<=*
5.4.205	unaffected	<=5.4.*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Metrics

0.27% 0.00266

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00266

Score over time

2025–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (4 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.27% (0.00266)	16.78th	v5 (v2026.06.15)
Jun 15, 2026	0.24% (0.00244)	15.27th	v5 (v2026.06.15)
Mar 17, 2025	0.02% (0.00016)	1.84th	v4 (v2025.03.14)
Feb 27, 2025	0.04% (0.00044)	12.72th	v3 (v2023.03.01)

Weaknesses (0)

No CWE recorded.

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-49656		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2347853		Issue Tracking
https://git.kernel.org/stable/c/2e1bcd33478ef44e63a45457055060b5fe4118ad		Patch
https://git.kernel.org/stable/c/34d2cd3fccced12b958b8848e3eff0ee4296764c		Patch
https://git.kernel.org/stable/c/3cf8ece9113242c10f83c7675ea4f4f67959ee43		Patch
https://git.kernel.org/stable/c/3d90607e7e6afa89768b0aaa915b58bd2b849276		Patch
https://git.kernel.org/stable/c/7208101ded1e9dcc52c8f0f8b16474211c871c1a		Patch
https://git.kernel.org/stable/c/c5fbf4f74c94fd60d5e9bf9f7f8268c3601562ca		Patch
https://lore.kernel.org/linux-cve-announce/2025022621-CVE-2022-49656-830e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49656
https://www.cve.org/CVERecord?id=CVE-2022-49656