CVE-2022-49462: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49462 is a vulnerability in the Linux kernel affecting the MSM Adreno A6XX GPU driver. The issue was discovered in 2022 and involves a reference count leak in the a6xx_gpu_init function (Kernel Commit).

The vulnerability stems from improper reference counting in the Linux kernel's MSM Adreno A6XX GPU driver. Specifically, the of_parse_phandle() function returns a node pointer with an incremented reference count, but the code failed to properly release this reference using of_node_put() when it was no longer needed. The a6xx_gmu_init() function passes the node to of_find_device_by_node() and of_dma_configure(), where of_find_device_by_node() takes its reference, but of_dma_configure() doesn't need the node after usage (Kernel Commit).

The vulnerability results in a reference count leak in the kernel's memory management system. While this type of issue typically leads to memory leaks and potential resource exhaustion over time, it generally doesn't present an immediate security risk (Kernel Commit).

The issue was fixed by adding a missing of_node_put() call to properly release the reference count after the node is no longer needed. The fix was implemented in the Linux kernel through commit c56de483093d7ad0782327f95dda7da97bc4c315 and backported to various stable kernel versions (Kernel Commit).