What’s Vulnerable › Vulnerabilities

CVE-2022-49514: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe Call of_node_put(platform_node) to avoid refcount leak in the error path.

Affected products

• Linux kernel: from 4.2 before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a1901f34f775b83ea4b8dbb5ed992147b9b8531
• https://git.kernel.org/stable/c/1e932aba3c7628c9f880ee9c2cfcc2ae3ba0c01e
• https://git.kernel.org/stable/c/23f340ed906c758cec6527376768e3bc1474ac30
• https://git.kernel.org/stable/c/48889eb3cce91d7f58e02bc07277b7f724b7a54a
• https://git.kernel.org/stable/c/4f4e0454e226de3bf4efd7e7924d1edc571c52d5
• https://git.kernel.org/stable/c/98d5afe868df998b0244f4c229ab758b4083684a
• https://git.kernel.org/stable/c/cc43b9fdca519c5b13be6a717bacbebccd628cf6
• https://git.kernel.org/stable/c/ebd5cb4f1f3f10b839e7575219e0f17b60c23113
• https://git.kernel.org/stable/c/fb66e0512e5ccc093070e21cf88cce8d98c181b5

Get alerted when CVE-2022-49514 or the next vulnerability affects your stack