CVE-2022-49678

Summary

CVE-2022-49678 is a vulnerability affecting the Linux kernel. It was identified in the 'soc: bcm: brcmstb: pm: pm-arm' component and involved a refcount leak in 'brcmstb_pm_probe'. When using 'of_find_matching_node()' to locate a node pointer, the reference count is incremented. However, the code failed to release the reference using 'of_node_put()' when no longer needed, leading to a refcount leak. In the function 'brcmstb_init_sram', a node pointer was obtained using 'of_address_to_resource()' and 'of_find_device_by_node()'. To mitigate this issue, developers must ensure they release the reference returned by 'of_find_matching_node()'.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.