What’s Vulnerable › Vulnerabilities

CVE-2022-48856: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-16 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add the missing of_node_put() to release the refcount.

Affected products

• Linux kernel: from 4.18 before 4.19.235; from 4.20 before 5.4.185; from 5.5 before 5.10.106; from 5.11 before 5.15.29; from 5.16 before 5.16.15 — fixed in 4.19.235, 5.10.106, 5.15.29, 5.16.15, 5.4.185

How to fix

Upgrade to a fixed version: Linux kernel 4.19.235, 5.10.106, 5.15.29, 5.16.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e1b9a2078e07fb1e6e91bf8badfd89ecab1e848
• https://git.kernel.org/stable/c/21044e679ed535345042d2023f7df0ca8e897e2a
• https://git.kernel.org/stable/c/2ac5b58e645c66932438bb021cb5b52097ce70b0
• https://git.kernel.org/stable/c/6263f2eb93a85ad7df504daf0c341a7fb6bbe8a6
• https://git.kernel.org/stable/c/f49f646f9ec296fc0afe7ae92c2bb47f23e3846c
• https://git.kernel.org/stable/c/f7b3b520349193f8a82cca74daf366199e06add9
• https://git.kernel.org/stable/c/0e1b9a2078e07fb1e6e91bf8badfd89ecab1e848
• https://git.kernel.org/stable/c/21044e679ed535345042d2023f7df0ca8e897e2a
• https://git.kernel.org/stable/c/2ac5b58e645c66932438bb021cb5b52097ce70b0
• https://git.kernel.org/stable/c/6263f2eb93a85ad7df504daf0c341a7fb6bbe8a6
• https://git.kernel.org/stable/c/f49f646f9ec296fc0afe7ae92c2bb47f23e3846c
• https://git.kernel.org/stable/c/f7b3b520349193f8a82cca74daf366199e06add9

Get alerted when CVE-2022-48856 or the next vulnerability affects your stack