In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error (e.g. probe deferral). Note that due to the reset controller being defined in devicetree in "lane" child nodes, devm_reset_control_get_exclusive() cannot be used directly.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/2156dc390402043ba5982489c6625adcb0b0975c cve-icon cve-icon
https://git.kernel.org/stable/c/4d2900f20edfe541f75756a00deeb2ffe7c66bc1 cve-icon cve-icon
https://git.kernel.org/stable/c/7ac21b24af859c097eb4034e93430056068f8f31 cve-icon cve-icon
https://git.kernel.org/stable/c/8c03eb0c8982677b4e17174073a011788891304d cve-icon cve-icon
https://git.kernel.org/stable/c/a39d9eccb333b8c07c43ebea1c6dfda122378a0f cve-icon cve-icon
https://git.kernel.org/stable/c/b7b5fbcaac5355e2e695dc0c08a0fcf248250388 cve-icon cve-icon
https://git.kernel.org/stable/c/ba173a6f8d8dffed64bb13ab23081bdddfb464f0 cve-icon cve-icon
https://git.kernel.org/stable/c/feb05b10b3ed3ae21b851520a0d0b71685439517 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022650-CVE-2022-49396-3a8f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49396 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49396 cve-icon
History

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error (e.g. probe deferral). Note that due to the reset controller being defined in devicetree in "lane" child nodes, devm_reset_control_get_exclusive() cannot be used directly.
Title phy: qcom-qmp: fix reset-controller leak on probe errors
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:11:26.145Z

Updated: 2025-05-04T08:36:47.558Z

Reserved: 2025-02-26T02:08:31.563Z

Link: CVE-2022-49396

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-02-26T07:01:16.173

Modified: 2025-02-26T07:01:16.173

Link: CVE-2022-49396

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49396 - Bugzilla