What’s Vulnerable › Vulnerabilities

CVE-2022-49715: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions of_find_node_by_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: from 4.7 before 4.19.249; from 4.20 before 5.4.200; from 5.5 before 5.10.124; from 5.11 before 5.15.49; from 5.16 before 5.18.6; 5.19-rc1, 5.19-rc2 — fixed in 4.19.249, 5.10.124, 5.15.49, 5.18.6, 5.4.200

How to fix

Upgrade to a fixed version: Linux kernel 4.19.249, 5.10.124, 5.15.49, 5.18.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/506a88a5bf261d76a5214c0338a320f2214c67ac
• https://git.kernel.org/stable/c/8d884c08eeb83142a7173cb46bcff0434ec42cf1
• https://git.kernel.org/stable/c/c136c2924a59a399aa789858cfb320d481964fb7
• https://git.kernel.org/stable/c/cc5984cf270b69d03f9f4b27063e535036c659e9
• https://git.kernel.org/stable/c/e824482e2c5edacc961b7dd30a92fd47606c3036
• https://git.kernel.org/stable/c/fa1ad9d4cc47ca2470cd904ad4519f05d7e43a2b

Get alerted when CVE-2022-49715 or the next vulnerability affects your stack