What’s Vulnerable › Vulnerabilities

CVE-2022-49621: cpufreq: pmac32-cpufreq: Fix refcount leak bug

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pmac32-cpufreq: Fix refcount leak bug In pmac_cpufreq_init_MacRISC3(), we need to add corresponding of_node_put() for the three node pointers whose refcount have been incremented by of_find_node_by_name().

Affected products

• Linux kernel: before 4.9.324; from 4.10 before 4.14.289; from 4.15 before 4.19.253; from 4.20 before 5.4.207; from 5.5 before 5.10.132; from 5.11 before 5.15.56 — fixed in 4.14.289, 4.19.253, 4.9.324, 5.10.132, 5.15.56, 5.18.13

How to fix

Upgrade to a fixed version: Linux kernel 4.14.289, 4.19.253, 4.9.324, 5.10.132. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/37c16fc2cb13a13f3c0193bfc6f2edef7d7df7d7
• https://git.kernel.org/stable/c/3ea9dbf7c2f436952bca331c6f5d72f75aca224e
• https://git.kernel.org/stable/c/4513018d0bd739097570d26a7760551cba3deb56
• https://git.kernel.org/stable/c/4585890ab2dbf455d80e254d3d859d4c1e357920
• https://git.kernel.org/stable/c/4f242486bf46d314b2e3838cc64b56f008a3c4d7
• https://git.kernel.org/stable/c/57289b6601fe78c09921599b042a0b430fb420ec
• https://git.kernel.org/stable/c/8dda30f81c751b01cd71f2cfaeef26ad4393b1d1
• https://git.kernel.org/stable/c/ccd7567d4b6cf187fdfa55f003a9e461ee629e36

Get alerted when CVE-2022-49621 or the next vulnerability affects your stack