-

CVE-2022-50572

ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

In the Linux kernel, the following vulnerability has been resolved:

ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

The of_get_next_child() returns a node with refcount incremented, and
decrements the refcount of prev. So in the error path of the while loop,
of_node_put() needs be called for cpu_ep.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < ed1376f771404917c2ec3ebc617431ec01146134
Status affected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < 06c9d468c06806dab752eb8e72addbf3792c1023
Status affected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < 85eb5c952b7fe2d2059beaa4a4dd26688b25547b
Status affected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < 49dad92af6892f46851af989ef3aa7cd7316c389
Status affected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < 4cc8431ec77a43ea106d8bde0860c61cfdda1cd0
Status affected
Version fce9b90c1ab7e915553c57353355700c79b39c86
Version < 8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.1
Status affected
Version 0
Version < 5.1
Status unaffected
Version <= 5.4.*
Version 5.4.229
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.121
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.