What’s Vulnerable › Vulnerabilities

CVE-2022-49397: phy: qcom-qmp: fix struct clk leak on probe errors

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error (e.g. probe deferral).

Affected products

• Linux kernel: from 4.12 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46; from 5.16 before 5.17.14 — fixed in 4.14.283, 4.19.247, 5.10.121, 5.15.46, 5.17.14, 5.18.3

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 5.10.121, 5.15.46. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0
• https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387
• https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4
• https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254
• https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024
• https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a
• https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df
• https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023

Get alerted when CVE-2022-49397 or the next vulnerability affects your stack