CVE-2022-50574: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50574 is a vulnerability discovered in the Linux kernel, specifically affecting the drm/omap display subsystem (dss) component. The vulnerability was published on October 22, 2025, and involves refcount leak bugs in the dss_init_ports() and __dss_uninit_ports() functions (NVD).

The vulnerability stems from improper reference counting in the Linux kernel's DRM OMAP driver. Specifically, the issue occurs when the of_node_put() function is not called for references returned by of_graph_get_port_by_id() in both failure paths and when the reference is no longer needed. This creates a reference counting leak in the dss_init_ports() and __dss_uninit_ports() functions (NVD).

The vulnerability results in a reference counting leak in the Linux kernel's DRM OMAP driver, which could potentially lead to resource exhaustion over time. While the immediate impact may be minimal, accumulated leaks could affect system stability and resource availability (NVD).

The vulnerability has been resolved through a patch that properly implements reference counting by calling of_node_put() for references returned by of_graph_get_port_by_id() in both the failure paths and when the reference is no longer needed (NVD).