Refcount Leak Vulnerability in Linux Kernel OMAP2+ by Vendor

CVE-2022-50199

What is CVE-2022-50199?

A refcount leak vulnerability exists in the omapdss_init_of function of the Linux kernel related to the OMAP2+ platform. When the omapdss_find_dss_of_node function calls of_find_compatible_node, it obtains a device node pointer whose reference count is incremented. Failure to properly release this reference by employing of_node_put() leads to a potential memory leak. The fix introduces the missing of_node_put() calls both in the normal execution flow and in error handling scenarios to ensure proper memory management and prevent resource leaks.

References