CVE-2022-49463: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49463 affects the Linux kernel's thermal driver subsystem, specifically in the imx_sc_thermal driver. The vulnerability was discovered and reported on May 17, 2022, and involves a reference count leak in the imx_sc_thermal_probe function. The issue affects various Linux distributions including Ubuntu 22.04 LTS (Jammy) (Ubuntu Security).

The vulnerability stems from improper reference counting in the thermal/drivers/imx_sc_thermal driver. Specifically, the of_find_node_by_name() function returns a node pointer with an incremented reference count, but the code failed to properly release this reference using of_node_put() when done. This oversight was introduced in the commit that added i.MX system controller thermal support (Kernel Git).

The reference count leak in the imx_sc_thermal driver could lead to memory resource exhaustion over time, potentially affecting system stability and performance (Ubuntu Security).

The vulnerability requires local access to a system with the affected imx_sc_thermal driver loaded. There are no known public exploits targeting this vulnerability (Ubuntu Security).

The issue has been fixed by adding the missing of_node_put() call to properly release the reference count. The fix was implemented in the Linux kernel through a patch that modifies the imx_sc_thermal_probe function to ensure proper cleanup of resources (Kernel Git).