CVE-2022-50360: drm/msm/dp: fix aux-bus EP lifetime
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: fix aux-bus EP lifetime
Device-managed resources allocated post component bind must be tied to the lifetime of the aggregate DRM device or they will not necessarily be released when binding of the aggregate device is deferred.
This can lead resource leaks or failure to bind the aggregate device when binding is later retried and a second attempt to allocate the resources is made.
For the DP aux-bus, an attempt to populate the bus a second time will simply fail ("DP AUX EP device already populated").
Fix this by tying the lifetime of the EP device to the DRM device rather than DP controller platform device.
Patchwork: https://patchwork.freedesktop.org/patch/502672/
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50360?
CVE-2022-50360 has been classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50360?
To fix CVE-2022-50360, update to the latest patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2022-50360?
CVE-2022-50360 affects various versions of the Linux kernel where the DRM subsystem is utilized.
What types of exploits are possible with CVE-2022-50360?
Exploiting CVE-2022-50360 could potentially lead to resource management issues in the DRM subsystem.
Is there a workaround for CVE-2022-50360?
Currently, there are no official workarounds for CVE-2022-50360, so updating the kernel is the recommended action.