Linux Kernel Vulnerability in GIC-v3 Error Handling

CVE-2022-49716

What is CVE-2022-49716?

A vulnerability in the Linux kernel's GIC-v3 component was identified where improper error handling in the gic_populate_ppi_partitions function could lead to a refcount leak. Specifically, the function of_get_child_by_name() returns a node pointer with an incremented reference count that must be properly managed. If the kcalloc function fails, the existing code does not appropriately release the node, resulting in potential memory issues. This flaw has now been addressed by ensuring that of_node_put() is called when the node is no longer needed, thereby preventing resource leaks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References