CVE-2022-49676
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49676 is a vulnerability affecting the Linux kernel's Samsung Exynos5422-dmc driver. The issue stems from a failure to properly decrement reference counts when using of_get_dram_timings, resulting in a memory leak. Specifically, of_parse_phandle() increments the refcount of the node pointer it returns, but in certain error paths, it fails to call of_node_put() to release the node when no longer needed. This inconsistency has been rectified by adding a put_node label and using it to release the node in error conditions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.