What’s Vulnerable › Vulnerabilities

CVE-2022-49517: ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.

Affected products

• Linux kernel: from 4.12 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46; from 5.16 before 5.17.14 — fixed in 4.14.283, 4.19.247, 5.10.121, 5.15.46, 5.17.14, 5.18.3

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 5.10.121, 5.15.46. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/05654431a18fe24e5e46a375d98904134628a102
• https://git.kernel.org/stable/c/318afb1442eeef089fe7f8a8297d97c0302ff6f6
• https://git.kernel.org/stable/c/61a85a20e8df5e0a92cfe169c92425c7bae0753b
• https://git.kernel.org/stable/c/9345122f5fb9f97a206f440f38bb656e53f46912
• https://git.kernel.org/stable/c/94587aa17abf8b26f543d2b29c44abc21bc36836
• https://git.kernel.org/stable/c/bc2afecaabd2a2c9f17e43b4793a30e3461bfb29
• https://git.kernel.org/stable/c/c71494f5f2b444adfd992a7359a0d2a791642b39
• https://git.kernel.org/stable/c/f279c49f17ce10866087ea6c0c57382158974b63

Get alerted when CVE-2022-49517 or the next vulnerability affects your stack