CVE-2022-50246
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() I got the following report while doing device(mt6370-tcpc) load test with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay node /i2c/pmic@34/tcpc/connector The 'fwnode' set in tcpci_parse_config() which is called in tcpci_register_port(), its node refcount is increased in device_get_named_child_node(). It needs be put while exiting, so call fwnode_handle_put() in the error path of tcpci_register_port() and in tcpci_unregister_port() to avoid leak.
How to fix
- linux linux_kernel5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 or later
- git.kernel.org/stable/c/0384e87e3fec735e47f1c133c796f32ef7a72a9b
- git.kernel.org/stable/c/4f257e2eba419ab4cd880c822346450e4e7b2af3
- git.kernel.org/stable/c/5f125507d2270035dfcf83fbff6cff5a143e200c
- git.kernel.org/stable/c/ba75be6f0d9d028d20852564206565a4c03e3288
- git.kernel.org/stable/c/d3b6c28a71f111a6c67ddc3238aab95910fd86cf
- git.kernel.org/stable/c/e75a324409715bd71348f79a49aa61b69dbeb676
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.19 ≤ v < 5.4.229, 5.5 ≤ v < 5.10.163, 5.11 ≤ v < 5.15.86, 5.16 ≤ v < 6.0.16, 6.1 ≤ v < 6.1.2 | 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.