CVE-2022-49712

Summary

CVE-2022-49712 is a vulnerability affecting the Linux kernel's usb subsystem, specifically the lpc32xx_udc driver. The issue stems from a failure to properly release a node pointer after use in the lpc32xx_udc_probe function. This results in a refcount leak, as the node pointer obtained from of_parse_phandle() is not released with of_node_put() when no longer needed. The vulnerability could potentially lead to resource exhaustion or other unintended consequences. The issue has been addressed by adding the missing of_node_put() call to avoid the refcount leak.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.