CVE-2022-50104: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50104 is a vulnerability discovered in the Linux kernel affecting the powerpc/xive subsystem. The issue was identified in the xivegetmaxprio function where a reference count leak occurs when offindnodebypath() returns a node pointer with an incremented reference count but fails to properly release it using ofnode_put() when done (NVD, Wiz).

The vulnerability stems from a missing ofnodeput() call in the xivegetmaxprio function of the PowerPC's XIVE (eXternal Interrupt Virtualization Engine) subsystem. When offindnodeby_path() is called, it returns a node pointer with an incremented reference count. The function failed to properly decrement this reference count when the pointer was no longer needed, leading to a reference count leak (Wiz).

The reference count leak in the kernel's memory management can lead to memory resource exhaustion over time, potentially affecting system stability and performance (Wiz).

The vulnerability has been fixed by adding the missing ofnodeput() call to properly release the reference count when the node pointer is no longer needed (Wiz).