CVE-2022-49682 - xtensa: Fix refcount leak bug in time.c

Back Back to CVE browser

MEDIUM

xtensa: Fix refcount leak bug in time.c

Published Feb 26, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

In calibrate_ccount(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.9
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.9
- Version
  4.14.286
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.250
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  4.9.321
  Status
  unaffected
  Constraints
  <=4.9.*
- Version
  5.10.127
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.51
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.18.8
  Status
  unaffected
  Constraints
  <=5.18.*
- Version
  5.19
  Status
  unaffected
  Constraints
  <=*
- Version
  5.4.202
  Status
  unaffected
  Constraints
  <=5.4.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.9	affected	-
0	unaffected	<4.9
4.14.286	unaffected	<=4.14.*
4.19.250	unaffected	<=4.19.*
4.9.321	unaffected	<=4.9.*
5.10.127	unaffected	<=5.10.*
5.15.51	unaffected	<=5.15.*
5.18.8	unaffected	<=5.18.*
5.19	unaffected	<=*
5.4.202	unaffected	<=5.4.*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-402

References (14)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-49682		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2347722		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-54551		Advisory
https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5		Patch
https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64		Patch
https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7		Patch
https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74		Patch
https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150		Patch
https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73		Patch
https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5		Patch
https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23		Patch
https://lore.kernel.org/linux-cve-announce/2025022626-CVE-2022-49682-87bd@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49682
https://www.cve.org/CVERecord?id=CVE-2022-49682