Refcount Leak in Realview GIC Initialization in Linux Kernel

CVE-2022-49719

What is CVE-2022-49719?

A vulnerability exists in the Linux kernel related to the Realview Generic Interrupt Controller (GIC) initialization process. The function responsible for matching device nodes, of_find_matching_node_and_match(), fails to properly manage reference counts, leading to a potential refcount leak. This oversight can result in memory management issues, as the system does not release the node pointer when it is no longer needed. To mitigate this risk, an additional call to of_node_put() has been added to ensure that reference counts are accurately decremented, thus preventing resource leaks and enhancing system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References