CVE-2022-49188: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a memory leak vulnerability was identified in the q6v5allocmemoryregion function within the Qualcomm MSS remoteproc driver. The devicenode pointer, which is returned by ofparsephandle() or ofgetchildbyname() with an incremented refcount, was not properly released in all error cases (Kernel Commit).

The vulnerability occurs because the function only calls ofnodeput(node) when ofaddresstoresource succeeds, missing the error cases. This leads to memory leaks when the devicenode pointer is not properly released. The issue affects the drivers/remoteproc/qcomq6v5mss.c file in the Linux kernel (Kernel Commit).

The vulnerability results in memory leaks in the kernel when handling device nodes in the Qualcomm MSS remoteproc driver. Over time, this could lead to resource exhaustion and potential system instability (Kernel Commit).

The issue has been fixed by properly releasing the devicenode pointer using ofnode_put() in all cases, including error paths. The fix ensures that the reference count is properly managed for both successful and error cases (Kernel Commit).