CVE-2022-49715

Summary

CVE-2022-49715 is a vulnerability affecting the Linux kernel. It involves a refcount leak in the irqchip/gic-v3 component, specifically in the function gic_populate_ppi_partitions. This issue arises because the node pointer returned by of_find_node_by_phandle() has its refcount incremented, but it is not properly decremented when no longer needed. This oversight can lead to a refcount leak, potentially resulting in memory exhaustion and system instability. The vulnerability has been addressed by adding a missing call to of_node_put() to mitigate the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.