CVE-2022-49455: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49455 affects the Linux kernel's OpenCAPI Accelerator (OCXL) subsystem. The vulnerability was discovered in the ocxl_file_register_afu function where a potential double free condition could occur. This issue arises when info_release() is called in device_unregister() when info->dev's reference count reaches 0, leading to unnecessary subsequent calls to ocxl_afu_put() and kfree() (Kernel Git).

The vulnerability exists in the drivers/misc/ocxl/file.c file within the Linux kernel. The issue occurs in the error handling path of ocxl_file_register_afu function. When an error occurs and the code reaches the err_unregister label, the function would incorrectly attempt to free resources that would already be freed by the device_unregister() call. This could lead to a double-free condition, which is a serious memory corruption issue (Kernel Git).

A double-free vulnerability can potentially lead to memory corruption, which could be exploited to cause system crashes or potentially execute arbitrary code. In this specific case, the vulnerability affects systems using the OpenCAPI Accelerator subsystem (NVD).

The vulnerability requires access to a system with the OCXL driver loaded and the ability to trigger the error path in the ocxl_file_register_afu function. The issue was fixed in the mainline kernel and backported to stable kernel versions (Debian Security Tracker).

The fix involves adding a free_minor() call before device_unregister() and returning immediately after in the err_unregister error path. This prevents the double-free condition by ensuring proper resource cleanup order. The fix has been incorporated into various Linux distributions including Debian Bullseye (5.10.234-1), Bookworm (6.1.129-1), and Sid/Trixie (6.12.17-1) (Debian Security Tracker).