Refcount Leak in Xilinx VIPP Media Driver for Linux Kernel

CVE-2022-50309

What is CVE-2022-50309?

A refcount leak was identified in the Xilinx VIPP media driver within the Linux kernel. The issue arises when the function of_get_child_by_name() returns a node pointer without proper handling. Specifically, while the node pointer's reference count is incremented, the corresponding of_node_put() function is not called when the node is no longer needed. This oversight can lead to a memory leak, potentially affecting system stability over time. Proper implementation of reference count management is critical to maintain optimal performance and security in kernel-level drivers.

References