Fluid Attacks Database

Description

A reference count leak was found in the Linux kernel's Tegra114 clock driver. The tegra114_clock_init() function calls of_find_matching_node(), which returns a node pointer with an incremented reference count. The code fails to call of_node_put() when the node is no longer needed, resulting in a reference count leak that prevents proper resource cleanup.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	linux	=5.10.103-1 \|\| =5.10.103-1~bpo10+1 \|\| =5.10.106-1 \|\| =5.10.113-1 \|\| =5.10.120-1 \|\| =5.10.120-1~bpo10+1 \|\| =5.10.127-1 \|\| =5.10.127-2 \|\| =5.10.127-2~bpo10+1 \|\| =5.10.136-1 \|\| =5.10.140-1 \|\| =5.10.148-1 \|\| =5.10.149-1 \|\| =5.10.149-2 \|\| =5.10.46-4 \|\| =5.10.46-5 \|\| =5.10.70-1 \|\| =5.10.70-1~bpo10+1 \|\| =5.10.84-1 \|\| =5.10.92-1 \|\| =5.10.92-1~bpo10+1 \|\| =5.10.92-2 \|\| >=0 <5.10.158-1	5.10.158-1
debian 14	linux	>=0 <6.0.3-1	6.0.3-1
debian 12	linux	>=0 <6.0.3-1	6.0.3-1
debian 13	linux	>=0 <6.0.3-1	6.0.3-1
rpm rhel9	kernel	<0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
rpm rhel9	kernel-rt	-	-

Aliases

1. CVE-2022-508232. NVD-2022-508233. OSV-DEBIAN-2022-508234. OSV-2022-508235. SECURITY-TRACKER-CVE-2022-50823

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.