CVE-2022-49717

Summary

CVE-2022-49717 is a vulnerability affecting the Linux kernel. This issue involves the "apple-aic" driver in the "irqchip" subsystem. Specifically, a refcount leak was discovered in the "build_fiq_affinity" function. When using "of_find_node_by_phandle()" to obtain a node pointer, the reference count is incremented. However, the code failed to call "of_node_put()" when the node was no longer needed, resulting in a refcount leak. This vulnerability could potentially lead to memory exhaustion and system instability. The issue has been addressed by adding the missing "of_node_put()" call.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.