Refcount Leak Vulnerability in Linux Kernel's LPC32XX USB Gadget Driver

CVE-2022-49712

Summary

A refcount leak was identified in the LPC32XX USB gadget driver within the Linux kernel, which occurs during the probe process of the driver. The function of_parse_phandle() incorrectly retains a node pointer without releasing it appropriately, leading to a potential memory management issue. To mitigate this, the function now includes the necessary of_node_put() calls to ensure that node pointers are released when they are no longer needed. This fix prevents unnecessary memory retention, maintaining the stability and reliability of systems running the affected driver.

References