Refcount Leak in Linux Kernel for ARM Devices by bcm Vendor

CVE-2022-50207

What is CVE-2022-50207?

A refcount leak vulnerability was identified in the Linux kernel specifically impacting ARM devices. The flaw arose when the function of_find_matching_node() successfully returned a node pointer with an incremented reference count but lacked a corresponding call to of_node_put() to decrement it. This omission can lead to resource mismanagement and potential system instability as the reference count remains increased unnecessarily. Updating the kernel to include the missing of_node_put() is essential to prevent this leakage and ensure optimal memory usage.

References