Refcount Leak in Linux Kernel's IPMI IPMB Probe - CVE-2022-49415
Summary
CVE-2022-49415: In the Linux kernel, the following vulnerability has been resolved: ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it w... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resource allocation. It is widely used in various distributions, including Debian. The kernel's IPMI (Intelligent Platform Management Interface) subsystem allows for out-of-band management of computer systems, enabling monitoring and control of hardware components. The vulnerability in question arises from a refcount leak in the ipmi_ipmb_probe function, which can lead to resource mismanagement.
Vulnerability Detail
CVE-2022-49415 is a vulnerability in the Linux kernel's IPMI subsystem, specifically in the ipmi_ipmb_probe function. The issue originates from the improper handling of reference counts when using the of_parse_phandle function. This function returns a node pointer with an incremented reference count, but the code fails to release this reference using of_node_put, resulting in a refcount leak. If exploited, this vulnerability could lead to resource exhaustion or denial of service, as the leaked references accumulate over time.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version.
Conclusion
CVE-2022-49415 is a significant vulnerability in the Linux kernel's IPMI subsystem that can lead to resource mismanagement. It is crucial to update to the patched version 5.18.5-1 to mitigate the risks associated with this vulnerability. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49415 is a vulnerability in the Linux kernel's IPMI subsystem that involves a refcount leak in the ipmi_ipmb_probe function.
This vulnerability can lead to resource exhaustion or denial of service due to the accumulation of leaked reference counts.
Yes, the patched version for Debian 12 and 13 is 5.18.5-1. Updating to this version will resolve the issue.
You can check your current Linux kernel version using the command 'apt list --installed | grep linux'. If it is below 5.18.5-1, your system is affected.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
