CVE-2022-49489

drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume BUG: Unable to handle kernel paging request at virtual address 006b6b6b6b6b6be3 Call trace: dpu_vbif_init_memtypes+0x40/0xb8 dpu_runtime_resume+0xcc/0x1c0 pm_generic_runtime_resume+0x30/0x44 __genpd_runtime_resume+0x68/0x7c genpd_runtime_resume+0x134/0x258 __rpm_callback+0x98/0x138 rpm_callback+0x30/0x88 rpm_resume+0x36c/0x49c __pm_runtime_resume+0x80/0xb0 dpu_core_irq_uninstall+0x30/0xb0 dpu_irq_uninstall+0x18/0x24 msm_drm_uninit+0xd8/0x16c Patchwork: https://patchwork.freedesktop.org/patch/483255/ [DB: fixed Fixes tag]

Category

7.8
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/aa4cb188988dc6f1b3f4917d4dbc452150a5d871 patch
https://git.kernel.org/stable/c/ef10d0c68e8608848cd58fca2589685718426607 patch
https://git.kernel.org/stable/c/134760263f6441741db0b2970e7face6b34b6d1c patch
https://git.kernel.org/stable/c/ef4bdaac7cb5416f236613ed9337ff0ea8ee329b patch
https://git.kernel.org/stable/c/97ac682b6f7d36be5d934f86c9911066540a68f1 patch
https://git.kernel.org/stable/c/5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2 patch
https://git.kernel.org/stable/c/fa5186b279ecf44b14fb435540d2065be91cb1ed patch

Frequently Asked Questions

What is the severity of CVE-2022-49489?
CVE-2022-49489 has been scored as a high severity vulnerability.
How to fix CVE-2022-49489?
To fix CVE-2022-49489, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49489 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-49489 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49489?
CVE-2022-49489 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.