What’s Vulnerable › Vulnerabilities

CVE-2022-48820: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-16 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() This error path needs to decrement "usbphyc->n_pll_cons.counter" before returning.

Affected products

• Linux kernel: from 5.12 before 5.15.24; from 5.16 before 5.16.10; 5.17-rc1, 5.17-rc2, 5.17-rc3 — fixed in 5.15.24, 5.16.10

How to fix

Upgrade to a fixed version: Linux kernel 5.15.24, 5.16.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0ad1a88fa3eb0ded7798f52b79bc33f75fc9a6d2
• https://git.kernel.org/stable/c/94b16ca86ab688ed6fad4548f70137f93cf1f0a9
• https://git.kernel.org/stable/c/cfc826c88a79e22ba5d8001556eb2c7efd8a01b6
• https://git.kernel.org/stable/c/0ad1a88fa3eb0ded7798f52b79bc33f75fc9a6d2
• https://git.kernel.org/stable/c/94b16ca86ab688ed6fad4548f70137f93cf1f0a9
• https://git.kernel.org/stable/c/cfc826c88a79e22ba5d8001556eb2c7efd8a01b6

Get alerted when CVE-2022-48820 or the next vulnerability affects your stack