What’s Vulnerable › Vulnerabilities

CVE-2022-49432: powerpc/xics: fix refcount leak in icp_opal_init()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icp_opal_init() The of_find_compatible_node() function returns a node pointer with refcount incremented, use of_node_put() on it when done.

Affected products

• Linux kernel: before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1d5c8cea85fb1680eae8d645b96b92146cb4633c
• https://git.kernel.org/stable/c/2357bd7499a81c70b460e2191852bbfc7b63c354
• https://git.kernel.org/stable/c/537a317e5ff45d1f5a0ecaf6a0d7c8043c878cb1
• https://git.kernel.org/stable/c/53f3f7f73e609b934083f896cb7ca2c2cb009b9f
• https://git.kernel.org/stable/c/5dd9e27ea4a39f7edd4bf81e9e70208e7ac0b7c9
• https://git.kernel.org/stable/c/6a61a97106279c2aa16fbbb2a171fd5dde127d23
• https://git.kernel.org/stable/c/977dbc81d0f866ef63b93c127b7404f07734b3cc
• https://git.kernel.org/stable/c/9a42bc2494fadb453de00ce61042e588563ddc6d
• https://git.kernel.org/stable/c/df802880a7f9cd96b921b00639b00871f18a9a57

Get alerted when CVE-2022-49432 or the next vulnerability affects your stack