CVE-2022-49668
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49668 is a vulnerability affecting the Linux kernel. This issue involves a refcount leak in the 'exynos-ppmu' driver's 'of_get_devfreq_events'. The 'of_get_child_by_name()' function returns a node pointer with a refcount incremented, which should be released using 'of_node_put()' upon completion. However, this function only calls 'of_node_put()' in the normal path, leaving it uncalled in error paths. This oversight can lead to a refcount leak, potentially resulting in memory exhaustion or other system instabilities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.