Device Leakage Vulnerability in Linux Kernel HDMI Codec - CVE-2022-48852
Summary
CVE-2022-48852: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a devic... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system operations. It supports a wide range of devices and functionalities, including graphics and multimedia through the Direct Rendering Manager (DRM). The vulnerability in question affects the vc4 driver, specifically related to HDMI codec device management, which is crucial for handling audio and video output.
Vulnerability Detail
CVE-2022-48852 is a vulnerability in the Linux kernel's vc4 driver that arises from the failure to unregister the HDMI codec device upon unbinding. This oversight leads to device leakage, where resources are not properly released, potentially causing system instability and resource exhaustion. The vulnerability is classified with a CVSS score of 3.3, indicating a low to moderate severity level, primarily affecting systems that utilize HDMI output.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the necessary updates as soon as they are available.
Conclusion
CVE-2022-48852 represents a significant vulnerability in the Linux kernel's HDMI codec management, leading to potential device leakage. Users are encouraged to update their systems to mitigate this risk and ensure stable operation. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-48852 is a vulnerability in the Linux kernel's HDMI codec management that can lead to device leakage.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The main impact is resource leakage, which can lead to system instability and performance degradation over time.
Yes, patches are available for Debian 12 and 13. Users should upgrade to version 5.16.18-1 or later.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply updates as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
