CVE-2022-49683
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49683 is a vulnerability affecting the Linux kernel's iio subsystem. Specifically, in the adi-axi-adc driver's adi_axi_adc_attach_client function, a refcount leak occurs when using a node pointer obtained from of_parse_phandle(). The node pointer's refcount is incremented when obtained but not decremented when no longer needed, leading to a potential memory leak. This issue has been resolved by adding the missing of_node_put() call to avoid the refcount leak.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX