From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9D562216E21 for ; Wed, 26 Feb 2025 02:14:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536059; cv=none; b=qrguxsPhrbvACA6WSBJ5GsHpdYRFV24kFUx8ekhU7hc1qfzbz+1M7AXj/Uoa7/uBQWRxeAOyGWnA2gcl56EIPR8z+bwgH+KBIdSrN2OV14G9rPoy/bP4VcGNS6jGdE7pz5W6MYcfOREkD5YSP89BTdN6Bzn/XVJ6lNnHvQmMTR0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536059; c=relaxed/simple; bh=paclXBPeWLqkoTY924ucMfdb9vqndGe4qP2OyyFppOM=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=Nm6d5YjU/uocyNOgY+r4QiaDzHcNdh+/rtjLDJdct4UZaw6snK7b5tzXBKvPTsGdlq71Bz74gprukLG18s83YBA/zjVBku4E3XF2RlVXOIZAWtRpT0cVm8yBhTeXCOXI4OuvdDmfWMbyPjFxG5Oj5OYH6QIw4Uoe94kAonSRoZA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=mNNnjmbp; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="mNNnjmbp" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 6EE8CC4CEE6; Wed, 26 Feb 2025 02:14:19 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740536059; bh=paclXBPeWLqkoTY924ucMfdb9vqndGe4qP2OyyFppOM=; h=From:To:Cc:Subject:Date:Reply-to:From; b=mNNnjmbpEv6XD6yiZpgyFMVj1Yvz7dtic6giCeJe6T2nYqrFpKK0VYDiyTN9pW6QW IDAuvAoIsl7z6zH9VRCuj8+m97T63WmgiKNrgD1ECD4SK4dToZqiYKkZmGvJQCZ525 zEDdjUolIc5/zf56nLHg6i2LAfHEOOegBdyez/Y8= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-49438: Input: sparcspkr - fix refcount leak in bbc_beep_probe Date: Wed, 26 Feb 2025 03:11:52 +0100 Message-ID: <2025022657-CVE-2022-49438-30c7@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=3603; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=paclXBPeWLqkoTY924ucMfdb9vqndGe4qP2OyyFppOM=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7yr+u2q24IN+u/r6DyKHAqw9PqN9UEJM1XHv4o47/1 Duz/wdkd8SyMAgyMciKKbJ82cZzdH/FIUUvQ9vTMHNYmUCGMHBxCsBE/FYzLGi4eMF6idvv99XJ k1O8Eqw3HfQskGKYn1Dj9qaRzUDG8a+Rkl8C24KlAoy6AA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: Input: sparcspkr - fix refcount leak in bbc_beep_probe of_find_node_by_path() calls of_find_node_opts_by_path(), which returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak. The Linux kernel CVE team has assigned CVE-2022-49438 to this issue. Affected and fixed versions =========================== Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 4.9.318 with commit 2f51db16cb740ff90086189a1ef2581eab665591 Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 4.14.283 with commit f13064b0f2c651a3fbb0749932795c6fd21556a8 Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 4.19.247 with commit 353bc58ac6c782d4dcde9136a91d1f90867938fe Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.4.198 with commit bbc2b0ce6042dd3117827f10ea8cb67e0ab786da Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.10.121 with commit 6e07ccc7d56130f760d23f67a70c45366c07debc Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.15.46 with commit 418b6a3e12f75638abc5673eb76cb32127d0ab13 Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.17.14 with commit 73d6f42d8d86648bec2e73d34fe1648cb6d23e08 Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.18.3 with commit 1124e39fea0e2fdb4202f95b716cb97cc7de7cc7 Issue introduced in 2.6.26 with commit 9c1a5077fdca99356c891af37931e537dea874f5 and fixed in 5.19 with commit c8994b30d71d64d5dcc9bc0edbfdf367171aa96f Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49438 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/input/misc/sparcspkr.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/2f51db16cb740ff90086189a1ef2581eab665591 https://git.kernel.org/stable/c/f13064b0f2c651a3fbb0749932795c6fd21556a8 https://git.kernel.org/stable/c/353bc58ac6c782d4dcde9136a91d1f90867938fe https://git.kernel.org/stable/c/bbc2b0ce6042dd3117827f10ea8cb67e0ab786da https://git.kernel.org/stable/c/6e07ccc7d56130f760d23f67a70c45366c07debc https://git.kernel.org/stable/c/418b6a3e12f75638abc5673eb76cb32127d0ab13 https://git.kernel.org/stable/c/73d6f42d8d86648bec2e73d34fe1648cb6d23e08 https://git.kernel.org/stable/c/1124e39fea0e2fdb4202f95b716cb97cc7de7cc7 https://git.kernel.org/stable/c/c8994b30d71d64d5dcc9bc0edbfdf367171aa96f