CVE-2022-49693

Summary

CVE-2022-49693 is a vulnerability affecting the Linux kernel. Specifically, in the drm/msm/mdp4 driver, there was a refcount leak issue in the function mdp4_modeset_init_intf. This vulnerability occurred when of_graph_get_remote_node was used to obtain a remote device node pointer, which came with an incremented refcount. However, the code failed to call of_node_put() when no longer needed, resulting in a refcount leak. This issue has been addressed by adding the missing of_node_put() call to prevent the leak. The patch for this vulnerability can be found at <https://patchwork.freedesktop.org/patch/488473/>.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.