CVE-2022-50292: drm/msm/dp: fix bridge lifetime
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: fix bridge lifetime
Device-managed resources allocated post component bind must be tied to the lifetime of the aggregate DRM device or they will not necessarily be released when binding of the aggregate device is deferred.
This can lead resource leaks or failure to bind the aggregate device when binding is later retried and a second attempt to allocate the resources is made.
For the DP bridges, previously allocated bridges will leak on probe deferral.
Fix this by amending the DP parser interface and tying the lifetime of the bridge device to the DRM device rather than DP platform device.
Patchwork: https://patchwork.freedesktop.org/patch/502667/
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50292?
CVE-2022-50292 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50292?
To fix CVE-2022-50292, update the Linux kernel to the latest stable version that includes the patch for this vulnerability.
What vulnerability does CVE-2022-50292 address?
CVE-2022-50292 addresses a resource management issue in the DRM subsystem of the Linux kernel.
Which systems are affected by CVE-2022-50292?
CVE-2022-50292 impacts all versions of the Linux kernel prior to the resolution patch.
What are the potential impacts of CVE-2022-50292?
The potential impacts of CVE-2022-50292 include resource leaks and instability in DRM device management.