CVE-2022-49246
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-49246 affects the Linux kernel's ASoC (ALSA System on Chip) Atmel driver. The vulnerability was discovered in the error handling of the sndprotoprobe function, where devicenode pointers returned by ofparse_phandle() were not properly managed in error paths, leading to potential reference count leaks (Kernel Git).

Technical details

The vulnerability exists in the mikroe-proto.c file within the sound/soc/atmel directory. The issue occurs because the devicenode pointer returned by ofparsephandle() has its reference count incremented, but the function only called ofnode_put() in the regular execution path, omitting it in error handling paths. This oversight could result in memory leaks when error conditions are encountered (Kernel Git).

Impact

The vulnerability could lead to memory leaks in the Linux kernel when error conditions are encountered in the Atmel ASoC driver's probe function. While memory leaks can gradually degrade system performance, this particular issue appears to have limited direct security impact (NVD).

Mitigation and workarounds

The issue has been fixed by adding proper ofnodeput() calls in error handling paths. The fix was implemented in the Linux kernel through a patch that ensures proper reference counting in both normal and error paths (Kernel Git).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-rt-64k
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-modules-extra
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-devel-matched
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-debug-modules-partner
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management