CVE-2022-49609
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49609 is a vulnerability affecting the Linux kernel. This issue involves a refcount leak in the versatile_reboot_probe function of the power/reset driver for ARM-Versatile architecture. The vulnerability arises when of_find_matching_node_and_match() returns a node pointer with an incremented refcount, which is not properly handled. To address this issue, the missing of_node_put() call has been added to prevent refcount leaks and ensure proper memory management.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.