Critical IRQ Management Vulnerability in Linux Kernel - CVE-2022-49458
Summary
CVE-2022-49458: In the Linux kernel, the following vulnerability has been resolved: drm/msm: don't free the IRQ if it was not requested As msm_drm_uninit() is called from the msm_drm_init() error path, additional care should be necessar... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, responsible for managing hardware resources and providing essential services to software applications. It supports a wide range of hardware architectures and is known for its stability and performance. The vulnerability CVE-2022-49458 affects the Direct Rendering Manager (DRM) subsystem, specifically within the msm (Qualcomm's Mobile Station Modem) driver, which is crucial for graphics rendering on devices using Qualcomm hardware.
Vulnerability Detail
CVE-2022-49458 is a vulnerability in the Linux kernel's DRM subsystem where the function msm_drm_uninit() may attempt to free an IRQ (interrupt request line) that was never allocated due to an earlier failure in the initialization process. This can lead to system instability and potential crashes, as the kernel may attempt to free an already-free IRQ, resulting in warnings and errors in the system logs. The vulnerability arises from improper error handling in the initialization sequence of the msm DRM driver.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability other than applying the patch. Users are advised to monitor their systems for any unusual behavior and ensure that they are running the latest kernel version.
Conclusion
CVE-2022-49458 is a critical vulnerability in the Linux kernel's DRM subsystem that requires immediate attention. Users are encouraged to update their systems to the latest kernel version to avoid potential instability and crashes. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49458 is a vulnerability in the Linux kernel's DRM subsystem that can lead to system instability due to improper IRQ management.
This vulnerability can cause warnings and errors in system logs, potentially leading to crashes or instability in systems using the affected kernel version.
You should update your Linux kernel to version 5.18.5-1 or later to mitigate the vulnerability.
As of now, there are no publicly known exploits specifically targeting CVE-2022-49458, but it is advisable to apply the patch to prevent potential exploitation.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
