Refcount Leak Vulnerability in Linux Kernel Affects Multiple Versions

CVE-2022-50191

What is CVE-2022-50191?

A refcount leak vulnerability exists in the Linux kernel's regulator framework, specifically in the function responsible for obtaining regulation constraints. This flaw occurs due to an oversight in the reference counting mechanism, where the function of_get_child_by_name() increases the reference count but fails to release it adequately. This can lead to memory retention issues and might affect the overall stability of systems utilizing the affected kernel versions. Developers are advised to apply patches that address this vulnerability to maintain system integrity.

References