CVE-2022-48820

HIGH

Linux Kernel - Refcount Leak in stm32_usbphyc_pll_enable()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() This error path needs to decrement "usbphyc->n_pll_cons.counter" before returning.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/94b16ca86ab688ed6fad4548f70137f93cf1f0a9

Patch

https://git.kernel.org/stable/c/0ad1a88fa3eb0ded7798f52b79bc33f75fc9a6d2

Patch

https://git.kernel.org/stable/c/cfc826c88a79e22ba5d8001556eb2c7efd8a01b6

Scores

CVSS v3 7.1

EPSS 0.0028

EPSS Percentile 20.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (12)

linux/Kernel 5.12.0 - 5.15.24linux

linux/Kernel 5.16.0 - 5.16.10linux

Linux/Linux < 5.12

Linux/Linux 5.12

Linux/Linux 5.15.24 - 5.15.*

Linux/Linux 5.16.10 - 5.16.*

Linux/Linux 5.17

Linux/Linux 5b1af71280abd82efbe28cd28d553363dfde0a34 - 0ad1a88fa3eb0ded7798f52b79bc33f75fc9a6d2

Linux/Linux 5b1af71280abd82efbe28cd28d553363dfde0a34 - 94b16ca86ab688ed6fad4548f70137f93cf1f0a9

Linux/Linux 5b1af71280abd82efbe28cd28d553363dfde0a34 - cfc826c88a79e22ba5d8001556eb2c7efd8a01b6

... and 2 more

Published Jul 16, 2024

Tracked Since Feb 18, 2026