CVE-2022-49324
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
Summary
CVE-2022-49324 is a vulnerability affecting the Linux kernel. This issue involved a refcount leak in the mips_cpc_default_phys_base function. Specifically, the of_find_compatible_node() function was not releasing the refcount incremented by it, leading to a memory leak. This oversight has been rectified in the latest kernel updates by adding the missing of_node_put() call to properly release the refcount.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.