CVE-2022-49652
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49652 is a vulnerability affecting the Linux kernel. Specifically, in the dmaengine subsystem, there was a refcount leak issue identified in the function "ti_dra7_xbar_route_allocate." This issue occurred when the function failed to decrement the reference count of a node pointer obtained from of_parse_phandle(). As a result, memory leakage could take place. To address this issue, the missing call to of_node_put() has been added to properly manage the reference count and prevent the leak.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.