CVE-2022-49188

MEDIUM

Linux Kernel 4.8-5.10.110, 5.11.0-5.15.33, 5.16.0-5.16.19, 5.17.0-5.17.2 - Use-After-Free in q6v5_alloc_memory_region

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region The device_node pointer is returned by of_parse_phandle() or of_get_child_by_name() with refcount incremented. We should use of_node_put() on it when done. This function only call of_node_put(node) when of_address_to_resource succeeds, missing error cases.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0025
EPSS Percentile 15.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (17)
linux/Kernel 4.8.0 - 5.10.110linux
linux/Kernel 5.11.0 - 5.15.33linux
linux/Kernel 5.16.0 - 5.16.19linux
linux/Kernel 5.17.0 - 5.17.2linux
Linux/Linux < 4.8
Linux/Linux 051fb70fd4ea40fbc7139186a4890b2fe5cb1e76 - 07a5dcc4bed9d7cae54adf5aa10ff9f037a3204b
Linux/Linux 051fb70fd4ea40fbc7139186a4890b2fe5cb1e76 - a7d988735e757e111f9722de7cf1b40a84a48b1f
Linux/Linux 051fb70fd4ea40fbc7139186a4890b2fe5cb1e76 - b9df3007b3cda4936cc50f5a7d2d30505a652828
Linux/Linux 051fb70fd4ea40fbc7139186a4890b2fe5cb1e76 - bd4771ba2cf9e18473a42b5b70175e50d67a64bb
Linux/Linux 051fb70fd4ea40fbc7139186a4890b2fe5cb1e76 - f7210ca29a783c94478da02368731e4c9cf7cdb7
... and 7 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026