In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe This function only calls of_node_put() in the regular path. And it will cause refcount leak in error paths. For example, when codec_np is NULL, saif_np[0] and saif_np[1] are not NULL, it will cause leaks. of_node_put() will check if the node pointer is NULL, so we can call it directly to release the refcount of regular pointers.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/44acdaf7acb60054d872bed18ce0e7db8ce900ce cve-icon cve-icon
https://git.kernel.org/stable/c/67e12f1cb2f97468c12b59e21975eaa0f332e7d2 cve-icon cve-icon
https://git.kernel.org/stable/c/6ae0a4d8fec551ec581d620f0eb1fe31f755551c cve-icon cve-icon
https://git.kernel.org/stable/c/790d2628e3fcc819d8f5572eb5615113fb2e727a cve-icon cve-icon
https://git.kernel.org/stable/c/86b6cf989437e694fd0a15782b5a513853a739e0 cve-icon cve-icon
https://git.kernel.org/stable/c/8d880226c86f37624e2a5f3c6d92ac0ec3375f96 cve-icon cve-icon
https://git.kernel.org/stable/c/d2923b48d99fe663cb93d8b481c93299fcd68656 cve-icon cve-icon
https://git.kernel.org/stable/c/f16ad2c0e22687f80e5981c67374023f51c204b9 cve-icon cve-icon
https://git.kernel.org/stable/c/f8d38056bcd220ea6f0802a5586d1a12ebcce849 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022625-CVE-2022-49242-3bd3@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49242 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49242 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 21 Apr 2025 02:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Mon, 17 Mar 2025 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 13:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe This function only calls of_node_put() in the regular path. And it will cause refcount leak in error paths. For example, when codec_np is NULL, saif_np[0] and saif_np[1] are not NULL, it will cause leaks. of_node_put() will check if the node pointer is NULL, so we can call it directly to release the refcount of regular pointers.
Title ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:56:03.812Z

Updated: 2025-10-01T19:47:02.248Z

Reserved: 2025-02-26T01:49:39.294Z

Link: CVE-2022-49242

cve-icon Vulnrichment

Updated: 2025-10-01T16:11:34.906Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:01.153

Modified: 2025-10-01T20:15:59.740

Link: CVE-2022-49242

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49242 - Bugzilla