What’s Vulnerable › Vulnerabilities

CVE-2022-49243: ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

Affected products

• Linux kernel: from 3.8 before 4.9.311; from 4.10 before 4.14.276; from 4.15 before 4.19.238; from 4.20 before 5.4.189; from 5.5 before 5.10.110; from 5.11 before 5.15.33 — fixed in 4.14.276, 4.19.238, 4.9.311, 5.10.110, 5.15.33, 5.16.19

How to fix

Upgrade to a fixed version: Linux kernel 4.14.276, 4.19.238, 4.9.311, 5.10.110. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0325193cf40dc3a6e27d55a5b98680936deebcd0
• https://git.kernel.org/stable/c/32e6ceb05f36432811753852c674a301f944a24b
• https://git.kernel.org/stable/c/4793a02deb31b71b3984abc67bf1011a03c13b18
• https://git.kernel.org/stable/c/662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec
• https://git.kernel.org/stable/c/81f266396237cea09a8c6322a6a78535f06ed345
• https://git.kernel.org/stable/c/a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5
• https://git.kernel.org/stable/c/b0c56a0071116a37c24df998166c22a7e4684626
• https://git.kernel.org/stable/c/f590797fa3c1bccdd19e55441592a23b46aef449
• https://git.kernel.org/stable/c/f8b7b9a0594715ecfbe6f18db2328d992242654a

Get alerted when CVE-2022-49243 or the next vulnerability affects your stack