CVE-2022-49422: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49422 affects the Linux kernel's DMA engine subsystem, specifically in the IDXD (Intel Data Streaming Accelerator) driver. The vulnerability was discovered in the error handling path of the idxdcdevregister() function. When a call to allocchrdevregion() fails, the already allocated resources are leaking due to improper error handling (Kernel Git).

The vulnerability exists in the drivers/dma/idxd/cdev.c file where the error handling path in idxdcdevregister() function was incomplete. When allocchrdevregion() fails, the function would return without properly cleaning up previously allocated resources, leading to a resource leak. The fix involves adding proper error handling code to unregister previously allocated character device regions before returning the error code (Kernel Git).

The vulnerability results in a resource leak in the Linux kernel's IDXD driver when character device registration fails. This could potentially lead to system resource exhaustion over time (NVD).

The issue has been fixed by adding proper error handling code that unregisters previously allocated character device regions when an error occurs. The fix was implemented in the Linux kernel through a patch that adds an error handling label and cleanup code (Kernel Git).