CVE-2022-49354
Linux Kernel ata pata_octeon_cf Reference Count Leak Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() to avoid refcount leak.
INFO
Published Date :
Feb. 26, 2025, 7:01 a.m.
Last Modified :
April 14, 2025, 7:44 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel to the patched version.
- Rebuild and install the kernel.
- Reboot the system to apply changes.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-49354.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-49354 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-49354
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-49354 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-49354 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Apr. 14, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-Other Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.198 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.10 up to (excluding) 4.14.283 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 up to (excluding) 4.19.247 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.18 up to (excluding) 5.18.4 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 5.17.15 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.8 up to (excluding) 4.9.318 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.122 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.47 Added Reference Type kernel.org: https://git.kernel.org/stable/c/10d6bdf532902be1d8aa5900b3c03c5671612aa2 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/19cb3ece14547cb1ca2021798aaf49a3f82643d1 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7bd85c5ba1687daf54e3b6907673c3604b1e75cf Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/888312dc297a8a103f6371ef668c7e04f57a7679 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/8d8ad067b90f231b8fdb14acee673ca4012f6045 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c9782e1b21bee4b783a64b2a91e7e71406c21a21 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/d5a1e7f33c88780b279835d63665d7e38ccb671f Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/fb2cb409b504bb3a69e65a17f3120328c8e50219 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 26, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() to avoid refcount leak. Added Reference https://git.kernel.org/stable/c/10d6bdf532902be1d8aa5900b3c03c5671612aa2 Added Reference https://git.kernel.org/stable/c/19cb3ece14547cb1ca2021798aaf49a3f82643d1 Added Reference https://git.kernel.org/stable/c/7bd85c5ba1687daf54e3b6907673c3604b1e75cf Added Reference https://git.kernel.org/stable/c/888312dc297a8a103f6371ef668c7e04f57a7679 Added Reference https://git.kernel.org/stable/c/8d8ad067b90f231b8fdb14acee673ca4012f6045 Added Reference https://git.kernel.org/stable/c/a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b Added Reference https://git.kernel.org/stable/c/c9782e1b21bee4b783a64b2a91e7e71406c21a21 Added Reference https://git.kernel.org/stable/c/d5a1e7f33c88780b279835d63665d7e38ccb671f Added Reference https://git.kernel.org/stable/c/fb2cb409b504bb3a69e65a17f3120328c8e50219