CVE-2022-49621
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49621 is a vulnerability affecting the Linux kernel's cpufreq subsystem. The issue involves a refcount leak bug in the pmac32-cpufreq driver. Specifically, in the function pmac_cpufreq_init_MacRISC3(), the developers failed to add corresponding of_node_put() calls for three node pointers that have their refcount incremented by of_find_node_by_name(). This oversight could lead to memory leaks, potentially impacting system stability and performance. The vulnerability has been resolved in recent Linux releases.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.