Refcount Leak in Linux Kernel CXL Component

CVE-2022-50311

What is CVE-2022-50311?

A refcount leak has been found in the CXL component of the Linux kernel. The issue arises during the execution of the of_get_next_parent() function, which increments the reference count of a node pointer but fails to properly release it with of_node_put() in certain error conditions. This oversight can lead to memory management issues and might result in resource exhaustion. Proper remediation involves adding the missing of_node_put() calls to avert the refcount leak, enhancing the overall stability and security of the kernel's operation.

References