Refcount Leak in Linux Kernel's Meson MX SoC Information Handler

CVE-2022-50209

What is CVE-2022-50209?

In the Linux Kernel, a vulnerability has been identified in the meson_mx_socinfo_init function, which may lead to a refcount leak. The issue arises as the of_find_matching_node() function increments the reference count for a node pointer. If this pointer is not properly managed, specifically by failing to call of_node_put() when the node is no longer needed, it results in a memory resource leak. Implementing the missing of_node_put() call resolves this issue, enhancing the overall stability and security of the Linux kernel.

References