CVE-2022-49652: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49652 is a reference counting vulnerability discovered in the Linux kernel's DMA engine subsystem, specifically in the Texas Instruments DMA crossbar driver. The vulnerability was introduced by commit ec9bfa1e1a79 which implemented bitops instead of idr in the DMA crossbar driver (Kernel Commit).

The vulnerability stems from a reference counting issue in the tidra7xbarrouteallocate function within the TI DMA crossbar driver. The function fails to properly release a reference count obtained through ofparsephandle(), which returns a node pointer with an incremented reference count. The missing ofnodeput() call in the error path leads to a reference count leak (Kernel Commit).

A reference count leak in the kernel's memory management can lead to memory resources not being properly freed, potentially causing memory exhaustion over time. This could affect system stability and performance on affected systems using the TI DMA crossbar driver.

The issue was fixed by adding the missing ofnodeput(dmaspec->np) call in the error path of tidra7xbarroute_allocate function. The fix was committed to the Linux kernel mainline and backported to stable kernel versions (Kernel Commit).