CVE-2022-49016

Description

In the Linux kernel, the following vulnerability has been resolved: net: mdiobus: fix unbalanced node reference count I got the following report while doing device(mscc-miim) load test with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay node /spi/soc@0/mdio@7107009c/ethernet-phy@0 If the 'fwnode' is not an acpi node, the refcount is get in fwnode_mdiobus_phy_device_register(), but it has never been put when the device is freed in the normal path. So call fwnode_handle_put() in phy_device_release() to avoid leak. If it's an acpi node, it has never been get, but it's put in the error path, so call fwnode_handle_get() before phy_device_register() to keep get/put operation balanced.

Reserved 2024-08-22 | Published 2024-10-21 | Updated 2024-12-19 | Assigner Linux

Product status

Default status
unaffected

bc1bee3b87ee48bd97ef7fd306445132ba2041b0 before 543d917f691ab06885ee779c862065899eaa4251
affected

bc1bee3b87ee48bd97ef7fd306445132ba2041b0 before 2708b357440427d6a9fee667eb7b8307f4625adc
affected

bc1bee3b87ee48bd97ef7fd306445132ba2041b0 before cdde1560118f82498fc9e9a7c1ef7f0ef7755891
affected

Default status
affected

5.14
affected

Any version before 5.14
unaffected

5.15.82
unaffected

6.0.12
unaffected

6.1
unaffected

References

git.kernel.org/...c/543d917f691ab06885ee779c862065899eaa4251

git.kernel.org/...c/2708b357440427d6a9fee667eb7b8307f4625adc

git.kernel.org/...c/cdde1560118f82498fc9e9a7c1ef7f0ef7755891

cve.org (CVE-2022-49016)

nvd.nist.gov (CVE-2022-49016)

Download JSON