Refcount Leak Vulnerability in Qcom AOSS for Linux Kernel

CVE-2022-50194

What is CVE-2022-50194?

A vulnerability has been identified in the handling of reference counts within the Linux kernel's Qcom AOSS subsystem. When utilizing the for_each_available_child_of_node() function, an early exit from the loop fails to properly manage the reference count, leading to a potential refcount leak. This issue is mitigated by incorporating a necessary call to of_node_put() on the child node when exiting the loop prematurely, ensuring proper memory management and stability of the system.

References