CVE-2022-49457: 
Linux Debian vulnerability analysis and mitigation

CVE-2022-49457 affects the Linux kernel's ARM versatile platform code. The vulnerability is related to a missing ofnodeput() call in the dcscb_init function, which could lead to a reference count leak. The issue was discovered and patched in 2022 (Kernel Commit).

The vulnerability exists in the arch/arm/mach-vexpress/dcscb.c file where the devicenode pointer returned by offindcompatiblenode() has its reference count incremented, but the code failed to call ofnodeput() to decrement the reference count when done. This could lead to a memory leak in the kernel (Kernel Commit).

The vulnerability could result in a kernel memory leak due to the reference count not being properly decremented, potentially leading to resource exhaustion over time (Kernel Commit).

The issue was fixed by adding an ofnodeput(node) call after of_iomap() to properly release the reference count. The fix was committed to the Linux kernel mainline and backported to stable kernel versions (Kernel Commit).