Refcount Leak in Zynq CPuFreq Implementation of Linux Kernel

CVE-2022-50197

What is CVE-2022-50197?

A vulnerability in the cpufreq subsystem of the Linux kernel related to Zynq has been identified. The issue arises from a missing call to 'of_node_put()', which is required to decrement the reference count of a compatible node pointer returned by 'of_find_compatible_node()'. This oversight can result in a refcount leak, potentially leading to resource mismanagement. The vulnerability has been resolved in subsequent updates.

References