Linux Kernel Vulnerability in GIC-v3 Error Handling

CVE-2022-49716

Summary

A vulnerability in the Linux kernel's GIC-v3 component was identified where improper error handling in the gic_populate_ppi_partitions function could lead to a refcount leak. Specifically, the function of_get_child_by_name() returns a node pointer with an incremented reference count that must be properly managed. If the kcalloc function fails, the existing code does not appropriately release the node, resulting in potential memory issues. This flaw has now been addressed by ensuring that of_node_put() is called when the node is no longer needed, thereby preventing resource leaks.

References