Linux Kernel Refcount Leak Vulnerability in Video FBDEV AMBA-CLCD

A refcount leak vulnerability has been identified in the Linux kernel's video framebuffer device (FBDEV) component, specifically within the AMBA-CLCD driver. The issue arises in the 'clcdfb_of_init_display()' function, where the references obtained from 'of_graph_get_next_endpoint()' and 'of_graph_get_remote_port_parent()' are not properly released, leading to a memory management flaw. This vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a refcount leak, potentially causing memory management issues such as use-after-free vulnerabilities or memory corruption.