What’s Vulnerable › Vulnerabilities

CVE-2022-49482: ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done.

Affected products

• Linux kernel: from 3.5 before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7
• https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730
• https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc
• https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee
• https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f
• https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c
• https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd
• https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469
• https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17

Get alerted when CVE-2022-49482 or the next vulnerability affects your stack