CVE-2022-49681

Summary

CVE-2022-49681 is a vulnerability affecting the Linux kernel. This issue was identified in the xtensa: xtfpga driver and involved a refcount leak bug in the setup process. During machine_setup(), of_find_compatible_node() would return a node pointer with its reference count incremented. However, when not in use, the node pointer was not properly released, resulting in a memory leak. This vulnerability could potentially lead to denial-of-service attacks or unintended system behavior. By not using the node pointer when no longer required and failing to call of_node_put(), the issue was resolved.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.