CVE-2022-50184: 
Linux Kernel vulnerability analysis and mitigation

A refcount leak vulnerability was identified in the Linux kernel, tracked as CVE-2022-50184. The issue was discovered in the drm/meson encoder_hdmi component, specifically in the meson_encoder_hdmi_init function. The vulnerability was publicly disclosed on June 18, 2025, affecting Linux kernel systems (NVD, Wiz).

The vulnerability stems from a missing of_node_put() call in the meson_encoder_hdmi_init function. When of_graph_get_remote_node() is called, it returns a remote device node pointer with an incremented reference count, but the original code failed to properly decrease this reference count by calling of_node_put() after use (Wiz).

The vulnerability results in a reference count leak in the Linux kernel's DRM (Direct Rendering Manager) subsystem. This type of issue typically leads to memory leaks, which can gradually consume system resources over time (Wiz).

The vulnerability has been resolved by adding the missing of_node_put() call to properly release the reference count when the remote device node pointer is no longer needed (Wiz).