CVE-2022-49397

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49397
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error (e.g. probe deferral).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0 Patch
https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387 Patch
https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4 Patch
https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254 Patch
https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024 Patch
https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a Patch
https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df Patch
https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Sep 2025, 19:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: qcom-qmp: corrige pérdida de struct clk en errores de sonda Asegúrese de liberar la referencia del reloj de la tubería en caso de un error de sonda tardío (por ejemplo, aplazamiento de la sonda).
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0 - () https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0 - Patch
References () https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387 - () https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387 - Patch
References () https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4 - () https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4 - Patch
References () https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254 - () https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254 - Patch
References () https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024 - () https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024 - Patch
References () https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a - () https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a - Patch
References () https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df - () https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df - Patch
References () https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023 - () https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023 - Patch
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-09-22 19:57

NVD link : CVE-2022-49397

Mitre link : CVE-2022-49397

CVE.ORG link : CVE-2022-49397

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime