Refcount Leak in Linux Kernel's ARM OMAP2+ Display Component

CVE-2022-50203

What is CVE-2022-50203?

A refcount leak vulnerability has been identified in the display component of the ARM OMAP2+ within the Linux kernel. Specifically, in the function omapdss_init_fbdev(), a pointer to a node returned by of_find_node_by_name() has its reference count incremented but is not properly released when it is no longer in use. This oversight may lead to memory leaks, potentially impacting system stability over time. The appropriate use of the function of_node_put() is necessary to ensure proper reference count management and avoid such leaks.

References