CVE-2022-50489: drm/mipi-dsi: Detach devices when removing the host
In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host is unregistered, the code of mipidsihostunregister() loops over every device currently found on that bus and will unregister it.
However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50489?
CVE-2022-50489 has a medium severity rating as it can lead to device detachment issues in the Linux kernel's MIPI-DSI subsystem.
How do I fix CVE-2022-50489?
To fix CVE-2022-50489, ensure that you update to the patched version of the Linux kernel that addresses this vulnerability.
What causes CVE-2022-50489?
CVE-2022-50489 is caused by improper handling of device unregistration in the MIPI-DSI host within the Linux kernel.
Which Linux kernel versions are affected by CVE-2022-50489?
CVE-2022-50489 affects various versions of the Linux kernel prior to the security update that addresses this issue.
Is CVE-2022-50489 exploitable?
While CVE-2022-50489 may not have direct exploitability, it can lead to instability and unexpected behavior in systems using vulnerable kernels.