CVE-2022-49679

Summary

CVE-2022-49679 is a vulnerability affecting the Linux kernel on ARM architectures. A refcount leak was identified in the function 'axxia_boot_secondary'. This issue occurs when the 'of_find_compatible_node()' function returns a node pointer with an incremented refcount, which is not properly released with 'of_node_put()'. This oversight can lead to memory leaks, potentially causing system instability and performance degradation. The Linux kernel team has addressed this issue by adding the missing 'of_node_put()' call to mitigate the risk of refcount leaks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.