CVE-2022-49752

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 27, 2025
Updated: Apr 14, 2025

Summary

CVE-2022-49752 is a vulnerability affecting the Linux kernel that has been addressed. The issue involved a refcount leak in the function fwnode_graph_get_next_endpoint(). When 'parent' was returned by fwnode_graph_get_port_parent() with its refcount incremented, it was not properly put away after use. Since 'parent' is a const variable, a new variable was introduced to store the returned fwnode, and this new variable was placed before the function returned from fwnode_graph_get_next_endpoint(). This resolution prevents potential memory leaks and associated security risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share