From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 732E221770A for ; Wed, 26 Feb 2025 02:14:50 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536090; cv=none; b=af2CgNBCALlApjKp40jqFxCJeAVAjAthkOPnkUeWX3e91QZEqpgtsDhMVg7a9OBoCZWy4P/VEDSXLVo6+Is0UxzvkSS6iTtjsR7KWeoPyhLNl0sfut15n7Yxs8bW/TCmQZxctylAg0scuj9Xhdr1eKLCw2fa/70ayY38H/rY8n8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536090; c=relaxed/simple; bh=qrj8ptnkxQvV/oRxapEodcNja18YIrlJWB8HfA0K+zU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=JaV3oSm/hI3d11dAGPV8u+UZR6l0/AXiIWcaQli86a+t16CEJ6P6hPCRo277ElROqYGGEI2VuUQgvGHs1aKzKqrZ62rHcIfd8+o5uWvBi1uww01TAloeJsh5OlkM8nqqL3zMioPDF8wVfsVIBMwh3noTMn6GoEIDFPhycuHT/gg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=p/proC/q; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="p/proC/q" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 49E66C4CEDD; Wed, 26 Feb 2025 02:14:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740536090; bh=qrj8ptnkxQvV/oRxapEodcNja18YIrlJWB8HfA0K+zU=; h=From:To:Cc:Subject:Date:Reply-to:From; b=p/proC/qUH5eLhz5jptAVvd+6SRGLfgfQPsKQ0Gp5xMuglMH0Yo2CJdrmhpHMLAhu qyU3kruOh3FcFNF26cGU+5gForPj8mW7WTTUndq8c033iLCjivOqn4TFedgohRihfV 2ZQkPS7tVjjl0mgae4FQqxvbcw+PvAh0FiBz128c= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-49481: regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt Date: Wed, 26 Feb 2025 03:12:35 +0100 Message-ID: <2025022604-CVE-2022-49481-cbff@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=3520; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=qrj8ptnkxQvV/oRxapEodcNja18YIrlJWB8HfA0K+zU=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7yv+cO7JR+Jjd5PyfWhvuepocy73je9RyfdcLpwlG0 89e+Hy0tiOWhUGQiUFWTJHlyzaeo/srDil6GdqehpnDygQyhIGLUwAm8mUWw4LuefJ5Hsy5E849 5Ihd4/P/8+7fRxUZZrOLcVz7v8Err+zfKXE5aYV7Ofc7ZwIA X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt of_node_get() returns a node with refcount incremented. Calling of_node_put() to drop the reference when not needed anymore. The Linux kernel CVE team has assigned CVE-2022-49481 to this issue. Affected and fixed versions =========================== Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.9.318 with commit b74c0dd9179d21b7260260e075d597b23970100c Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.14.283 with commit 6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 4.19.247 with commit 984cfef0675ed7398814e14af2c5323911723e1c Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.4.198 with commit 0be5d9da5743b9825a95baec85a67500b2c1d362 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.10.121 with commit 9f564e29a51210a49df3d925117777c157a17d6d Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.15.46 with commit 56ab0c01027492cd161c64148e1dc892c56887ad Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.17.14 with commit 671be14fc31374b1a10a3abd93db6a8480838fc9 Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.18.3 with commit 49d785baeb91568332197be356d138e5e59c7ddb Issue introduced in 3.12 with commit 3784b6d64dc52ed3fbebad61a85ab9b7a687a167 and fixed in 5.19 with commit afaa7b933ef00a2d3262f4d1252087613fb5c06d Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49481 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/regulator/pfuze100-regulator.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4 https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362 https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9 https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d