CVE-2022-49714

Summary

CVE-2022-49714 is a vulnerability affecting the Linux kernel. In the irqchip/realtek-rtl driver, a refcount leak in the map_interrupts function has been identified. Specifically, the of_find_node_by_phandle() function returns a node pointer with a refcount incremented, but the code fails to call of_node_put() when it's no longer needed. This issue occurs in both the normal path and the error path, leaving the system vulnerable to potential memory leaks and resource exhaustion. To mitigate this vulnerability, developers are advised to call of_node_put() directly after of_property_read_u32() in order to properly manage node references and prevent potential memory leaks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.