CVE-2022-49591

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 10, 2025

Summary

CVE-2022-49591 is a vulnerability affecting the Linux kernel. In the file "ksz_common.c," a refcount leak bug was identified in the function "ksz_switch_register." This issue arises due to a failure to call "of_node_put()" after obtaining a reference using "of_get_child_by_name()," resulting in an increased reference count that is not properly decreased when the function concludes. This vulnerability could potentially lead to memory leaks and other unintended consequences. The issue has been resolved in subsequent Linux kernel updates.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share