CVE-2022-49486

low-risk
Published 2025-02-26

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe of_find_i2c_device_by_node() takes a reference, In error paths, we should call put_device() to drop the reference to aviod refount leak.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7
Patch https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21
Patch https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5
Patch https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329
Patch https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a
Patch https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal