CVE-2022-49437: powerpc/xive: Fix refcount leak in xive_spapr_init
In the Linux kernel, the following vulnerability has been resolved:
powerpc/xive: Fix refcount leak in xivespaprinit
offindcompatiblenode() returns a node pointer with refcount incremented, we should use ofnodeput() on it when done. Add missing ofnodeput() to avoid refcount leak.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49437?
CVE-2022-49437 is classified as a low severity vulnerability due to the nature of the refcount leak.
How do I fix CVE-2022-49437?
To fix CVE-2022-49437, apply the latest patches provided by the Linux kernel maintainers that address the refcount leak.
What systems are affected by CVE-2022-49437?
CVE-2022-49437 affects various versions of the Linux kernel, particularly those between versions 4.14 to 5.15.46, and 5.16 to 5.17.14.
What does CVE-2022-49437 impact?
CVE-2022-49437 can potentially lead to resource mismanagement in systems running the affected versions of the Linux kernel.
Is CVE-2022-49437 easy to exploit?
The exploitation of CVE-2022-49437 is considered difficult as it requires specific conditions to trigger the refcount leak.