Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2022-49514
CVE-2022-49514:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2022-49514 affects the Linux kernel's ASoC (ALSA System on Chip) MediaTek audio driver. The vulnerability was discovered in the error handling path of the mt8173max98090dev_probe function, where a reference count leak could occur due to improper cleanup of platform node resources (Kernel Git).
Technical details
The vulnerability stems from a missing ofnodeput(platformnode) call in the error path when handling codec node validation. This could lead to a reference count leak in the mt8173max98090devprobe function. The issue was introduced by two previous commits: 94319ba10eca ("ASoC: mediatek: Use platformofnode for machine drivers") and 493433785df0 ("ASoC: mediatek: mt8173: fix device_node leak") (Kernel Git).
Impact
A reference count leak in the kernel's memory management can lead to resource exhaustion over time, potentially affecting system stability and performance (Kernel Git).
Mitigation and workarounds
The vulnerability has been patched by adding proper cleanup code in the error path. The fix involves adding an ofnodeput(platformnode) call in a new error handling label 'putplatform_node' to ensure proper resource cleanup (Kernel Git).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management