In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing of_node_put after of_find_compatible_node of_find_compatible_node will increment the refcount of the returned device_node. Calling of_node_put() to avoid the refcount leak

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6d cve-icon cve-icon
https://git.kernel.org/stable/c/45d211668d33c49d73f5213e8c2b58468108647c cve-icon cve-icon
https://git.kernel.org/stable/c/46cb7868811d025c3d29c10d18b3422db1cf20d5 cve-icon cve-icon
https://git.kernel.org/stable/c/9bc72e47d4630d58a840a66a869c56b29554cfe4 cve-icon cve-icon
https://git.kernel.org/stable/c/a3265a9440030068547a20dfee646666f3ca5278 cve-icon cve-icon
https://git.kernel.org/stable/c/cafaaae4bb9ce84a2791fa29bf6907a9466c3883 cve-icon cve-icon
https://git.kernel.org/stable/c/dd4be8ecfb41a29e7c4e551b4e866157ce4a3429 cve-icon cve-icon
https://git.kernel.org/stable/c/e109058165137ef42841abd989f080adfefa14fa cve-icon cve-icon
https://git.kernel.org/stable/c/f8da78b2bae1f54746647a2bb44f8bd6025c57af cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022658-CVE-2022-49447-4819@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49447 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49447 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 17 Mar 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Tue, 04 Mar 2025 03:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

threat_severity

Low

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing of_node_put after of_find_compatible_node of_find_compatible_node will increment the refcount of the returned device_node. Calling of_node_put() to avoid the refcount leak
Title ARM: hisi: Add missing of_node_put after of_find_compatible_node
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:12:58.540Z

Updated: 2025-10-01T19:46:48.646Z

Reserved: 2025-02-26T02:08:31.571Z

Link: CVE-2022-49447

cve-icon Vulnrichment

Updated: 2025-10-01T16:47:14.139Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:21.103

Modified: 2025-10-01T20:16:20.170

Link: CVE-2022-49447

cve-icon Redhat

Severity : Low

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49447 - Bugzilla