CVE-2022-49188 Details
Description
In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region The device_node pointer is returned by of_parse_phandle() or of_get_child_by_name() with refcount incremented. We should use of_node_put() on it when done. This function only call of_node_put(node) when of_address_to_resource succeeds, missing error cases.
A vulnerability in the Linux kernel's remoteproc subsystem, specifically within the qcom_q6v5_mss component, has been addressed. The issue involved memory leaks related to device_node pointers, which are returned with an incremented reference count. The vulnerability arose because the code failed to properly release these pointers in certain error cases, leading to resource leaks.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/07a5dcc4bed9d7cae54adf5aa10ff9f037a3204b | kernel.org | Patch |
| https://git.kernel.org/stable/c/a7d988735e757e111f9722de7cf1b40a84a48b1f | kernel.org | Patch |
| https://git.kernel.org/stable/c/b9df3007b3cda4936cc50f5a7d2d30505a652828 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bd4771ba2cf9e18473a42b5b70175e50d67a64bb | kernel.org | Patch |
| https://git.kernel.org/stable/c/f7210ca29a783c94478da02368731e4c9cf7cdb7 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.8, < 5.10.110 >= 5.11, < 5.15.33 >= 5.16, < 5.16.19 >= 5.17, < 5.17.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Sep 23, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |