CVE-2022-49354

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe

of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() to avoid refcount leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 7bd85c5ba1687daf54e3b6907673c3604b1e75cf; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 8d8ad067b90f231b8fdb14acee673ca4012f6045; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < d5a1e7f33c88780b279835d63665d7e38ccb671f; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 19cb3ece14547cb1ca2021798aaf49a3f82643d1; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 888312dc297a8a103f6371ef668c7e04f57a7679; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < c9782e1b21bee4b783a64b2a91e7e71406c21a21; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < fb2cb409b504bb3a69e65a17f3120328c8e50219; >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 10d6bdf532902be1d8aa5900b3c03c5671612aa2
LinuxLinux3.8

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-493565.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() frCVE-2022-493575.5In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On ACVE-2022-493585.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: memleak flow rule from commit path Abort path reCVE-2022-493597.8In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Job should reference MMU not file_priv For a while now iCVE-2022-49368.8The WCFM Marketplace plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.11 due to missinCVE-2022-493605.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on total_data_blocks As Yanming reported CVE-2022-493615.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kerneCVE-2022-493629.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noCVE-2022-493635.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on block address in f2fs_do_zero_range() CVE-2022-493645.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty inode in f2fs_evict_inode() As Yanming reportCVE-2022-493655.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() The > ARRAY_SIZE()CVE-2022-493665.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue hap
CVE-2022-49354: Medium severity, CVSS 5.5 | Vulnix