CVE-2022-49473: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49473 is a vulnerability discovered in the Linux kernel's ASoC (ALSA System on Chip) driver for Texas Instruments j721e EVM audio subsystem. The issue was identified as a reference count leak in the j721esocprobe functions (Kernel Git).

The vulnerability stems from improper handling of reference counts in the j721e-evm.c driver. Specifically, the ofparsephandle() function returns a node pointer with an incremented reference count, but the code failed to properly release these references using ofnodeput() when they were no longer needed. This issue was introduced in commit 6748d0559059 which added the custom machine driver for j721e EVM (Kernel Git).

The reference count leak could potentially lead to memory resource exhaustion over time as system resources are not properly freed. This affects systems using the Texas Instruments j721e EVM audio subsystem with the affected driver code.

The issue was fixed by adding proper reference count management using ofnodeput() calls in the appropriate error handling paths. The fix was implemented in upstream Linux kernel commit a34840c4eb3278a7c29c9c57a65ce7541c66f9f2 and subsequently backported to stable kernel versions (Kernel Git).