01 Record

CVE-2022-49216

drm/tegra: Fix reference leak in tegra_dsi_ganged_probe

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

drm/tegra: Fix reference leak in tegra_dsi_ganged_probe

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.27% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 19.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-02-26 01:55Z1 YR AGO
Last updated: 2026-05-11 18:55Z5 MO AGO
Reserved: 2025-02-26
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Medium (CVSS 5.5)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: dcc9a9c73682e26fa6c99db165ae9a37601ecedaf817061b42aad0f8b0498460

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe94236cde4d519cdecd45e2435defba33abdc99f to < 0e2f4e434e71dffd1085c3dccd676514bd71d316, e94236cde4d519cdecd45e2435defba33abdc99f to < 5e8fdb6392d945d33fef959eab73f8c34bc0a63b, e94236cde4d519cdecd45e2435defba33abdc99f to < 2d6ae8b747fe55f54de4a4441d636974aa53f56a, e94236cde4d519cdecd45e2435defba33abdc99f to < a725070701883fe62266ee6d2f31d67e6cdd31df, e94236cde4d519cdecd45e2435defba33abdc99f to < 1e06710c43a090f14bb67714265a01cd1d7a37c5, e94236cde4d519cdecd45e2435defba33abdc99f to < 852c1f5f3119a38ee68e319bab10277fc1ab06b7, e94236cde4d519cdecd45e2435defba33abdc99f to < cd78b74031cbc94133965f1017deb822657fc1a6, e94236cde4d519cdecd45e2435defba33abdc99f to < f3c99c686e098300c246e5e8a1474133e3dacb05, e94236cde4d519cdecd45e2435defba33abdc99f to < 221e3638feb8bc42143833c9a704fa89b6c366bb, 3.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0e2f4e434e71dffd1085c3dccd676514bd71d316
git.kernel.orghttps://git.kernel.org/stable/c/5e8fdb6392d945d33fef959eab73f8c34bc0a63b
git.kernel.orghttps://git.kernel.org/stable/c/2d6ae8b747fe55f54de4a4441d636974aa53f56a
git.kernel.orghttps://git.kernel.org/stable/c/a725070701883fe62266ee6d2f31d67e6cdd31df
git.kernel.orghttps://git.kernel.org/stable/c/1e06710c43a090f14bb67714265a01cd1d7a37c5
git.kernel.orghttps://git.kernel.org/stable/c/852c1f5f3119a38ee68e319bab10277fc1ab06b7
git.kernel.orghttps://git.kernel.org/stable/c/cd78b74031cbc94133965f1017deb822657fc1a6
git.kernel.orghttps://git.kernel.org/stable/c/f3c99c686e098300c246e5e8a1474133e3dacb05
git.kernel.orghttps://git.kernel.org/stable/c/221e3638feb8bc42143833c9a704fa89b6c366bb

07 Fixed in

Debian 12

linux
Fixed in 5.17.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.17.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.17.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.