CVE-2022-49224: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a memory leak vulnerability was identified in the power supply driver for ab8500 (CVE-2022-49224). The issue occurs in the ab8500fgsysfsinit function where kobjectinitandadd() takes a reference even when it fails, but the code doesn't properly clean up the memory in error cases (Kernel Commit).

The vulnerability exists in the drivers/power/supply/ab8500fg.c file. When kobjectinitandadd() fails, it returns an error but still holds a reference to the memory. According to the documentation, kobjectput() must be called to properly clean up the memory associated with the object when an error occurs. The fix involves adding a kobjectput() call within the error handling path to prevent the memory leak (Kernel Commit).

This memory leak could lead to gradual system memory exhaustion over time as the leaked memory is not properly freed when the error condition occurs. While the impact per occurrence is small, repeated triggers could eventually affect system stability and performance (Kernel Commit).

The issue has been fixed by adding proper memory cleanup in the error path. The fix involves calling kobjectput() when kobjectinitandadd() fails. Users should update to a patched version of the Linux kernel that includes the fix (Kernel Commit).