Back to Database
Status published
Medium
CVE-2022-49421
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-49421
Credits & Attribution
No credits recorded in the NVD database.
References
- https://git.kernel.org/stable/c/6c92711db7c90f78e0b67ac2a8944d0fe7e12d83
- https://git.kernel.org/stable/c/2e2e2c71b2642289438392edbf5d08cdbc0b138b
- https://git.kernel.org/stable/c/51eb1bb6baeb478538dd4ec6459fd68c44a855b1
- https://git.kernel.org/stable/c/8db59df7f5826e104db82cfddbf22a33a151193e
- https://git.kernel.org/stable/c/c1c4405222b6fc98c16e8c2aa679c14e41d81465
- https://git.kernel.org/stable/c/f2dfb4ab887d67be7d0892ba041d3c8d738d3356
- https://git.kernel.org/stable/c/bbb2a24e863b6a10129546a0a4ceea2f07deec39
- https://git.kernel.org/stable/c/38d245cebf545338a6bc1c7762023de3fbecd7b7
- https://git.kernel.org/stable/c/b23789a59fa6f00e98a319291819f91fbba0deb8
More from Linux
View All →CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown
0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown
0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown
0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown
0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown
0
Affected Vendor
Linux
View all reports →Affected Software
Linux
Vulnerable Versions:
d10715be03bd8bad59ddc50236cb140c3bd73c7b, 3.17, 0, 4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3, 5.19
Timeline
Official Publish:
February 26th, 2025
Last Modified:
May 11th, 2026
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.