CVE-2022-49128

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49128
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Add missing pm_runtime_put_sync pm_runtime_get_sync() will increase the rumtime PM counter even when it returns an error. Thus a pairing decrement is needed to prevent refcount leak. Fix this by replacing this API with pm_runtime_resume_and_get(), which will not change the runtime PM counter on error. Besides, a matching decrement is needed on the error handling path to keep the counter balanced.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/46f47807738441e354873546dde0b000106c068a Patch
https://git.kernel.org/stable/c/792533e54cd6e89191798ccd1abd590c62b9077e Patch
https://git.kernel.org/stable/c/9df80dc738926a2ea4bd1ce5993c3d0f4b0e855c Patch
https://git.kernel.org/stable/c/ff13c90d7f7ab606b37be6d15140d19013d6736c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:31

Type Values Removed Values Added
CWE NVD-CWE-Other
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/46f47807738441e354873546dde0b000106c068a - () https://git.kernel.org/stable/c/46f47807738441e354873546dde0b000106c068a - Patch
References () https://git.kernel.org/stable/c/792533e54cd6e89191798ccd1abd590c62b9077e - () https://git.kernel.org/stable/c/792533e54cd6e89191798ccd1abd590c62b9077e - Patch
References () https://git.kernel.org/stable/c/9df80dc738926a2ea4bd1ce5993c3d0f4b0e855c - () https://git.kernel.org/stable/c/9df80dc738926a2ea4bd1ce5993c3d0f4b0e855c - Patch
References () https://git.kernel.org/stable/c/ff13c90d7f7ab606b37be6d15140d19013d6736c - () https://git.kernel.org/stable/c/ff13c90d7f7ab606b37be6d15140d19013d6736c - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/bridge: Agregar la función pm_runtime_put_sync que falta pm_runtime_get_sync() aumentará el contador de PM en tiempo de ejecución incluso cuando devuelva un error. Por lo tanto, se necesita una disminución de emparejamiento para evitar la fuga de refcount. Solucione esto reemplazando esta API con pm_runtime_resume_and_get(), que no cambiará el contador de PM en tiempo de ejecución en caso de error. Además, se necesita una disminución coincidente en la ruta de manejo de errores para mantener el contador equilibrado.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:31

NVD link : CVE-2022-49128

Mitre link : CVE-2022-49128

CVE.ORG link : CVE-2022-49128

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other