| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025091549-CVE-2022-50249-bfbe@gregkh> Date: Mon, 15 Sep 2025 16:01:57 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2022-50249: memory: of: Fix refcount leak bug in of_get_ddr_timings() From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_get_ddr_timings() We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease the refcount. The Linux kernel CVE team has assigned CVE-2022-50249 to this issue. Affected and fixed versions =========================== Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 4.9.331 with commit a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 4.14.296 with commit a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 4.19.262 with commit 68c9c4e6495b825be3a8946df1a0148399555fe4 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 5.4.220 with commit 85a40bfb8e7a170abcf9dae2c0898a1983e48daa Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 5.10.150 with commit daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 5.15.75 with commit 2680690f9ce4e6abbb4f559e97271c15b7eeda97 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 5.19.17 with commit 62ccab6e3376f8a22167c3b81468ae4f3e7d25f1 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 6.0.3 with commit 1c6cac6fa4d08aea161f83d38117d733b3c3a000 Issue introduced in 3.7 with commit e6b42eb6a66c188642aeb447312938c6f6ebee86 and fixed in 6.1 with commit 05215fb32010d4afb68fbdbb4d237df6e2d4567b Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-50249 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/memory/of_memory.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/a4d0bd4388e1a39df47e8aaa044ef6a7ee626e48 https://git.kernel.org/stable/c/a4f7eb83852a65b6f8dea7dcc42b7c76d4d9b0a3 https://git.kernel.org/stable/c/68c9c4e6495b825be3a8946df1a0148399555fe4 https://git.kernel.org/stable/c/85a40bfb8e7a170abcf9dae2c0898a1983e48daa https://git.kernel.org/stable/c/daaec4b3fe2297b022c6b2d6bf48b6e5265a60b9 https://git.kernel.org/stable/c/2680690f9ce4e6abbb4f559e97271c15b7eeda97 https://git.kernel.org/stable/c/62ccab6e3376f8a22167c3b81468ae4f3e7d25f1 https://git.kernel.org/stable/c/1c6cac6fa4d08aea161f83d38117d733b3c3a000 https://git.kernel.org/stable/c/05215fb32010d4afb68fbdbb4d237df6e2d4567b
Powered by blists - more mailing lists