CVE-2022-49682

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 11, 2025

Summary

CVE-2022-49682 is a vulnerability affecting the Linux kernel. This issue involved a refcount leak bug in the time.c file. Specifically, in the calibrate_ccount() function, a node pointer obtained from of_find_compatible_node() had its reference count incremented unnecessarily. Failure to use of_node_put() when the node was no longer in use could lead to a memory leak. The Linux community has since resolved this issue to mitigate potential security risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share