MediumFix available
pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.276, 4.19.238, 4.9.311, 5.10.110, 5.15.33, 5.16.19, 5.17.2, 5.4.189
- CVEs
- CVE-2022-49185
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 14:38 UTC · Revision 1
Source evidence
pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
core-osv · Original sourcePublished 26 Feb 2025, 01:55 UTC
In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.
osv:CVE-2022-49185
Kernel
Fixed versions: 4.9.311, 4.14.276, 4.19.238, 5.4.189, 5.10.110, 5.15.33, 5.16.19, 5.17.2
Complete source record
{
"id": "3ac84f8b184eb6b4639fa182b9382d5f495790f4fe358d4d1259da8d398c8662",
"url": "https://osv.dev/vulnerability/CVE-2022-49185",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe",
"summary": "In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak.",
"evidence": "osv:CVE-2022-49185",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.9.311",
"evidence": "/affected/1/ranges"
},
{
"value": "4.14.276",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.238",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.189",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.110",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.33",
"evidence": "/affected/1/ranges"
},
{
"value": "5.16.19",
"evidence": "/affected/1/ranges"
},
{
"value": "5.17.2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CVE-2022-49185",
"aliases": [
"CVE-2022-49185"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "32e67eee670e1254ee5ab41e2f454680acb9c17c"
},
{
"fixed": "59250d547542f1c7765a78dc97ddfe5e6b0d2ab0"
},
{
"fixed": "0356d4b64a03d23daf99a2a29d7d7d91d6ec2ea8"
},
{
"fixed": "0067ba448f1c29ca06e5aee00d8506889ed1f9d0"
},
{
"fixed": "bc1e29a35147c1ba6ea2b06a16cb0028f7c852d2"
},
{
"fixed": "669b05ff43bd7ed684379c6e2006a6dad5127b71"
},
{
"fixed": "c52703355766c347f270df222a744e0c491a02f2"
},
{
"fixed": "9511c6018cd772668def8b034bc67269847e591a"
},
{
"fixed": "62580a40c9bef3d8a90629c64dda381344b35ffd"
},
{
"fixed": "c09ac191b1f97cfa06f394dbfd7a5db07986cefc"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49185.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.9.0"
},
{
"fixed": "4.9.311"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.10.0"
},
{
"fixed": "4.14.276"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.238"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.189"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.110"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.33"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.16.19"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.17.0"
},
{
"fixed": "5.17.2"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49185.json"
}
}
],
"modified": "2026-10-28T02:30:51.238939294Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0067ba448f1c29ca06e5aee00d8506889ed1f9d0",
"https://git.kernel.org/stable/c/0356d4b64a03d23daf99a2a29d7d7d91d6ec2ea8",
"https://git.kernel.org/stable/c/59250d547542f1c7765a78dc97ddfe5e6b0d2ab0",
"https://git.kernel.org/stable/c/62580a40c9bef3d8a90629c64dda381344b35ffd",
"https://git.kernel.org/stable/c/669b05ff43bd7ed684379c6e2006a6dad5127b71",
"https://git.kernel.org/stable/c/9511c6018cd772668def8b034bc67269847e591a",
"https://git.kernel.org/stable/c/bc1e29a35147c1ba6ea2b06a16cb0028f7c852d2",
"https://git.kernel.org/stable/c/c09ac191b1f97cfa06f394dbfd7a5db07986cefc",
"https://git.kernel.org/stable/c/c52703355766c347f270df222a744e0c491a02f2",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49185.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49185",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49185.json"
}
},
"related_cves": [
{
"value": "CVE-2022-49185",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 519658,
"published_at": "2025-02-26T01:55:35.068+00:00"
}