Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48656 Details

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() We should call of_node_put() for the reference returned by of_parse_phandle() in fail path or when it is not used anymore. Here we only need to move the of_node_put() before the check.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/a17df55bf6d536712da6902a83db82b82e67d5a2 kernel.orgPatch
https://git.kernel.org/stable/c/aa11dae059a439af82bae541b134f8f53ac177b5 kernel.orgPatch
https://git.kernel.org/stable/c/dd5a6c5a08752b613e83ad2cb5133e72a64b876d kernel.orgPatch
https://git.kernel.org/stable/c/f9fdb0b86f087c2b7f6c6168dd0985a3c1eda87e kernel.orgPatch
https://git.kernel.org/stable/c/a17df55bf6d536712da6902a83db82b82e67d5a2 CVEPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-401Missing Release of Memory after Effective Lifetime[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.6.0, < 5.10.146
>= 5.11.0, < 5.15.71
>= 5.16.0, < 5.19.12

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-48656
NVD Published Date:
Apr 28, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2022-48656 Details - Not Deferred