Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fixed error handling in sndprotoprobe. The devicenode pointer is returned by ofparsephandle, with the refcount incremented. We should use ofnodeput on it after that operation. This function only calls ofnodeput in th...

The vulnerability of the snd_proto_probe() function in the sound/soc/atmel/mikroe-proto.c module allows a hacker to cause a system failure in the Linux operating system’s SoC kernel.

The vulnerability of the sndprotoprobe function in the sound/soc/atmel/mikroe-proto.c module of the Linux operating system’s sound support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-49246

CVE-2022-49246 affects the Linux kernel, specifically ASoC: atmel: snd_proto_probe. The issue is a refcount leak: of_parse_phandle() returns a device_node with refcount incremented, but of_node_put() was only called in the regular path, not in error paths. The fix ensures of_node_put() is called ...