CVE-2022-49462: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49462 is a vulnerability in the Linux kernel affecting the MSM Adreno A6XX GPU driver. The issue was discovered in 2022 and involves a reference count leak in the a6xxgpuinit function (Kernel Commit).

The vulnerability stems from improper reference counting in the Linux kernel's MSM Adreno A6XX GPU driver. Specifically, the ofparsephandle() function returns a node pointer with an incremented reference count, but the code failed to properly release this reference using ofnodeput() when it was no longer needed. The a6xxgmuinit() function passes the node to offinddevicebynode() and ofdmaconfigure(), where offinddevicebynode() takes its reference, but ofdmaconfigure() doesn't need the node after usage (Kernel Commit).

The vulnerability results in a reference count leak in the kernel's memory management system. While this type of issue typically leads to memory leaks and potential resource exhaustion over time, it generally doesn't present an immediate security risk (Kernel Commit).

The issue was fixed by adding a missing ofnodeput() call to properly release the reference count after the node is no longer needed. The fix was implemented in the Linux kernel through commit c56de483093d7ad0782327f95dda7da97bc4c315 and backported to various stable kernel versions (Kernel Commit).