CVE-2022-49188: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a memory leak vulnerability was identified in the q6v5_alloc_memory_region function within the Qualcomm MSS remoteproc driver. The device_node pointer, which is returned by of_parse_phandle() or of_get_child_by_name() with an incremented refcount, was not properly released in all error cases (Kernel Commit).

The vulnerability occurs because the function only calls of_node_put(node) when of_address_to_resource succeeds, missing the error cases. This leads to memory leaks when the device_node pointer is not properly released. The issue affects the drivers/remoteproc/qcom_q6v5_mss.c file in the Linux kernel (Kernel Commit).

The vulnerability results in memory leaks in the kernel when handling device nodes in the Qualcomm MSS remoteproc driver. Over time, this could lead to resource exhaustion and potential system instability (Kernel Commit).

The issue has been fixed by properly releasing the device_node pointer using of_node_put() in all cases, including error paths. The fix ensures that the reference count is properly managed for both successful and error cases (Kernel Commit).