| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025022658-CVE-2022-49088-a1ec@gregkh> Date: Wed, 26 Feb 2025 02:54:53 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2022-49088: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe Description =========== In the Linux kernel, the following vulnerability has been resolved: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe This node pointer is returned by of_find_compatible_node() with refcount incremented. Calling of_node_put() to aovid the refcount leak. The Linux kernel CVE team has assigned CVE-2022-49088 to this issue. Affected and fixed versions =========================== Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.4.189 with commit fbe5f4c0dd3475178f17ddd8b8d5044ebeae0be7 Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.10.111 with commit ebd1e3458dbf6643aa0272da398cb5b537d492b7 Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.15.34 with commit 599874bbc4ed832ccb578d48ac0ae7344382ef43 Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.16.20 with commit 46d120f7c163706d6c31ee00baa0be64c4572b78 Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.17.3 with commit 45fdd98b70142521739615ad1bfb760401863b73 Issue introduced in 5.3 with commit d346c9e86d8685d7cdceddf5b2e9c4376334620c and fixed in 5.18 with commit 2b04bd4f03bba021959ca339314f6739710f0954 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49088 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/ethernet/freescale/dpaa2/dpaa2-ptp.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/fbe5f4c0dd3475178f17ddd8b8d5044ebeae0be7 https://git.kernel.org/stable/c/ebd1e3458dbf6643aa0272da398cb5b537d492b7 https://git.kernel.org/stable/c/599874bbc4ed832ccb578d48ac0ae7344382ef43 https://git.kernel.org/stable/c/46d120f7c163706d6c31ee00baa0be64c4572b78 https://git.kernel.org/stable/c/45fdd98b70142521739615ad1bfb760401863b73 https://git.kernel.org/stable/c/2b04bd4f03bba021959ca339314f6739710f0954
Powered by blists - more mailing lists