CVE-2022-49373: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49373 affects the Linux kernel's watchdog component, specifically the ts4800wdt driver. The vulnerability was discovered in the ts4800wdtprobe function where a refcount leak occurs because ofparsephandle() returns a node pointer with refcount incremented, but the code was missing proper cleanup using ofnode_put() in certain error paths (Kernel Commit).

The vulnerability is a reference counting issue in the TS-4800 watchdog driver. The bug occurs because the ofparsephandle() function returns a node pointer with an incremented reference count, but the code path failed to properly decrement this count using ofnodeput() in error conditions. This creates a reference count leak in the ts4800wdtprobe function (Kernel Commit).

The reference count leak could potentially lead to memory resource exhaustion over time as references are not properly cleaned up. This primarily affects systems using the TS-4800 watchdog driver (NVD).

The issue has been fixed by adding proper cleanup calls using ofnodeput() in the error paths of the ts4800wdtprobe function. The fix was implemented in the Linux kernel through a patch that adds the missing ofnodeput() calls (Kernel Commit).