| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025022604-CVE-2022-49481-cbff@gregkh> Date: Wed, 26 Feb 2025 03:12:35 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2022-49481: regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt Description =========== In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt of_node_get() returns a node with refcount incremented. Calling of_node_put() to drop the reference when not needed anymore. The Linux kernel CVE team has assigned CVE-2022-49481 to this issue. Affected and fixed versions =========================== Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.9.318 with commit b74c0dd9179d21b7260260e075d597b23970100c Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.14.283 with commit 6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.19.247 with commit 984cfef0675ed7398814e14af2c5323911723e1c Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.4.198 with commit 0be5d9da5743b9825a95baec85a67500b2c1d362 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.10.121 with commit 9f564e29a51210a49df3d925117777c157a17d6d Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.15.46 with commit 56ab0c01027492cd161c64148e1dc892c56887ad Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.17.14 with commit 671be14fc31374b1a10a3abd93db6a8480838fc9 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.18.3 with commit 49d785baeb91568332197be356d138e5e59c7ddb Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.19 with commit afaa7b933ef00a2d3262f4d1252087613fb5c06d Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49481 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/regulator/pfuze100-regulator.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362 https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9 https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d
Powered by blists - more mailing lists