CVE-2022-49678

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49678
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49678.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49678
Downstream
Related
Published
2025-02-26T02:24:08.833Z
Modified
2025-11-28T02:35:39.850169Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
Details

In the Linux kernel, the following vulnerability has been resolved:

soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstbpmprobe

offindmatchingnode() returns a node pointer with refcount incremented, we should use ofnodeput() on it when not need anymore. Add missing ofnode_put() to avoid refcount leak.

In brcmstbinitsram, it pass dn to ofaddresstoresource(), ofaddresstoresource() will call offinddevicebynode() to take reference, so we should release the reference returned by offindmatching_node().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49678.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0b741b8234c86065fb6954d32d427b3f7e14756f
Fixed
4f5877bdf7b593e988f1924f4c3df6523f80b39c
Fixed
734a4d15142bb4c8ecad2d8ec70d7564e78ae34d
Fixed
30bbfeb480ae8b5ee43199d72417b232590440c2
Fixed
10ba9d499a9fd82ed40897e734ba19870a879407
Fixed
dcafd5463d8f20c4f90ddc138a5738adb99f74c8
Fixed
37d838de369b07b596c19ff3662bf0293fdb09ee

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.250
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.202
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.127
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.51
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.8