Linux Kernel Refcount Leak Vulnerability in Video Framebuffer Driver

A refcount leak vulnerability has been identified in the Linux kernel's video framebuffer device (fbdev) subsystem, specifically within the clcdfb driver. The issue arises in the clcdfb_of_vram_setupof_parse_phandle() function, which returns a node pointer with an incremented reference count. Failure to release this reference properly with of_node_put() when the node is no longer needed leads to a memory management issue.

Impact

Exploitation of this vulnerability causes a memory refcount leak, which can lead to improper memory management and potential resource exhaustion.