CVE-2022-49457: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49457 affects the Linux kernel's ARM versatile platform code. The vulnerability is related to a missing of_node_put() call in the dcscb_init function, which could lead to a reference count leak. The issue was discovered and patched in 2022 (Kernel Commit).

The vulnerability exists in the arch/arm/mach-vexpress/dcscb.c file where the device_node pointer returned by of_find_compatible_node() has its reference count incremented, but the code failed to call of_node_put() to decrement the reference count when done. This could lead to a memory leak in the kernel (Kernel Commit).

The vulnerability could result in a kernel memory leak due to the reference count not being properly decremented, potentially leading to resource exhaustion over time (Kernel Commit).

The issue was fixed by adding an of_node_put(node) call after of_iomap() to properly release the reference count. The fix was committed to the Linux kernel mainline and backported to stable kernel versions (Kernel Commit).