
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-49246 affects the Linux kernel's ASoC (ALSA System on Chip) Atmel driver. The vulnerability was discovered in the error handling of the sndprotoprobe function, where devicenode pointers returned by ofparse_phandle() were not properly managed in error paths, leading to potential reference count leaks (Kernel Git).
The vulnerability exists in the mikroe-proto.c file within the sound/soc/atmel directory. The issue occurs because the devicenode pointer returned by ofparsephandle() has its reference count incremented, but the function only called ofnode_put() in the regular execution path, omitting it in error handling paths. This oversight could result in memory leaks when error conditions are encountered (Kernel Git).
The vulnerability could lead to memory leaks in the Linux kernel when error conditions are encountered in the Atmel ASoC driver's probe function. While memory leaks can gradually degrade system performance, this particular issue appears to have limited direct security impact (NVD).
The issue has been fixed by adding proper ofnodeput() calls in error handling paths. The fix was implemented in the Linux kernel through a patch that ensures proper reference counting in both normal and error paths (Kernel Git).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."