Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49718: Linux kernel Apple AIC component may exhaust resources
CVE-2022-49718 · published 1 year ago
Summary
The Apple AIC interrupt controller code in the Linux kernel could leave a reference count unreleased, causing a gradual build‑up of unused resources. Over time this can degrade system performance or lead to crashes. Updating the kernel to the latest version that includes the fix will resolve the issue.
What to do
- Update debian linux to version 5.18.14-1.
- Update linux kernel to version 5.18.6.
- Update linux linux_kernel to version 5.18.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.18, < 5.18.6 5.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.18.14-1 Fix: upgrade to 5.18.14-1
|
| Linux | linux | kernel |
>= 5.18.0, < 5.18.6 Fix: upgrade to 5.18.6
|
Original advisory text
irqchip/apple-aic: Fix refcount leak in aic_of_ic_init
In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in aic_of_ic_init of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.
References
- https://git.kernel.org/stable/c/3d45670fab3c25a7452721e4588cc95c51cda134 URL
- https://git.kernel.org/stable/c/6c0010d1dc67c89bcc857c46f542efe318f84ddc URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49718... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49718 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2022-49718 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta