CVE-2022-49656

Summary

CVE-2022-49656 is a vulnerability affecting the Linux kernel on ARM architectures. The issue lies in the meson driver's meson_smp_prepare_cpus function, where a refcount leak occurs. Specifically, after using of_find_compatible_node() to obtain a node pointer with an incremented refcount, the code fails to call of_node_put() to decrease the refcount, resulting in a memory leak. This vulnerability could potentially be exploited by attackers to exhaust system resources or cause denial-of-service conditions. The Linux kernel developers have since resolved the issue by adding the missing of_node_put() call to prevent refcount leaks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.