CVE-2022-49237

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49237
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49237.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49237
Downstream
Related
Published
2025-02-26T01:56:01.158Z
Modified
2025-11-28T13:53:51.651020Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ath11k: add missing of_node_put() to avoid leak
Details

In the Linux kernel, the following vulnerability has been resolved:

ath11k: add missing ofnodeput() to avoid leak

The node pointer is returned by offindnodebytype() or ofparsephandle() with refcount incremented. Calling ofnodeput() to aovid the refcount leak.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49237.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6ac04bdc5edb418787ab2040b1f922c23464c750
Fixed
7d51cb010b20d70b16dc6e4341bf29d6c5b32564
Fixed
3d38faef0de1756994b3d95e47b2302842f729e2

Affected versions

v5.*

v5.16
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/mhi.c",
            "function": "ath11k_mhi_read_addr_from_dt"
        },
        "signature_type": "Function",
        "digest": {
            "length": 302.0,
            "function_hash": "157483012207172962223958573293552383831"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d38faef0de1756994b3d95e47b2302842f729e2",
        "id": "CVE-2022-49237-3b863e11",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/mhi.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "41273946281286173310745962366940889413",
                "122377948580743616731179899204304438613",
                "298699894924225192820034245010547052746",
                "68775265877901301849475110000887256219"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d51cb010b20d70b16dc6e4341bf29d6c5b32564",
        "id": "CVE-2022-49237-5891a0db",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/qmi.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "318005316855077299637157972391485446392",
                "280483029983675224697410507228538049446",
                "333727637710457105089378180180565150796",
                "280800540603084396922239857814123024816"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d51cb010b20d70b16dc6e4341bf29d6c5b32564",
        "id": "CVE-2022-49237-643d2781",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/qmi.c",
            "function": "ath11k_qmi_assign_target_mem_chunk"
        },
        "signature_type": "Function",
        "digest": {
            "length": 2592.0,
            "function_hash": "43939228757095978519511999160757676610"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d51cb010b20d70b16dc6e4341bf29d6c5b32564",
        "id": "CVE-2022-49237-7aa4c2d8",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/mhi.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "41273946281286173310745962366940889413",
                "122377948580743616731179899204304438613",
                "298699894924225192820034245010547052746",
                "68775265877901301849475110000887256219"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d38faef0de1756994b3d95e47b2302842f729e2",
        "id": "CVE-2022-49237-877829fb",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/qmi.c",
            "function": "ath11k_qmi_assign_target_mem_chunk"
        },
        "signature_type": "Function",
        "digest": {
            "length": 2592.0,
            "function_hash": "43939228757095978519511999160757676610"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d38faef0de1756994b3d95e47b2302842f729e2",
        "id": "CVE-2022-49237-b776739f",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/qmi.c"
        },
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "318005316855077299637157972391485446392",
                "280483029983675224697410507228538049446",
                "333727637710457105089378180180565150796",
                "280800540603084396922239857814123024816"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d38faef0de1756994b3d95e47b2302842f729e2",
        "id": "CVE-2022-49237-cb94b79f",
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/mhi.c",
            "function": "ath11k_mhi_read_addr_from_dt"
        },
        "signature_type": "Function",
        "digest": {
            "length": 302.0,
            "function_hash": "157483012207172962223958573293552383831"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d51cb010b20d70b16dc6e4341bf29d6c5b32564",
        "id": "CVE-2022-49237-e385d35b",
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49237.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.17.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49237.json"