CVE-2022-49716
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
Summary
CVE-2022-49716 is a vulnerability affecting the Linux kernel. In the irqchip/gic-v3 component, an error in the function gic_populate_ppi_partitions has been identified. Specifically, the use of of_get_child_by_name() returns a node pointer with an incremented refcount, which should be released using of_node_put() when no longer needed. However, if kcalloc fails, this step is overlooked, resulting in a refcount leak. This vulnerability has been addressed in the latest kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.