NetSight
IP …
medium5.5

CVE-2022-49346

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list Every iteration of for_each…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. when breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the gphy_fw_np. Add missing of_node_put() to avoid refcount leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.4.198
from 5.5 before 5.10.122
from 5.11 before 5.15.47
from 5.16 before 5.17.15
from 5.18 before 5.18.4
Version 5.19

References