In the Linux kernel, the following vulnerability has been resolved:
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
BUG: Unable to handle kernel paging request at virtual address 006b6b6b6b6b6be3
Call trace: dpuvbifinitmemtypes+0x40/0xb8 dpuruntimeresume+0xcc/0x1c0 pmgenericruntimeresume+0x30/0x44 _genpdruntimeresume+0x68/0x7c genpdruntimeresume+0x134/0x258 _rpmcallback+0x98/0x138 rpmcallback+0x30/0x88 rpmresume+0x36c/0x49c _pmruntimeresume+0x80/0xb0 dpucoreirquninstall+0x30/0xb0 dpuirquninstall+0x18/0x24 msmdrm_uninit+0xd8/0x16c
Patchwork: https://patchwork.freedesktop.org/patch/483255/ [DB: fixed Fixes tag]
[
{
"id": "CVE-2022-49489-0bc12813",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa5186b279ecf44b14fb435540d2065be91cb1ed",
"digest": {
"length": 1010.0,
"function_hash": "273966576801297725817610381257889088495"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-15b308ec",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef10d0c68e8608848cd58fca2589685718426607",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-23694735",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef10d0c68e8608848cd58fca2589685718426607",
"digest": {
"length": 1067.0,
"function_hash": "105782232361133064086805414606640765796"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-31344847",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@134760263f6441741db0b2970e7face6b34b6d1c",
"digest": {
"length": 1010.0,
"function_hash": "273966576801297725817610381257889088495"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-3888efd2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-390e51b3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa4cb188988dc6f1b3f4917d4dbc452150a5d871",
"digest": {
"length": 1209.0,
"function_hash": "124932679020882089442503095954549808438"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-4c0386ac",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef4bdaac7cb5416f236613ed9337ff0ea8ee329b",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-7344dfef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef4bdaac7cb5416f236613ed9337ff0ea8ee329b",
"digest": {
"length": 1010.0,
"function_hash": "273966576801297725817610381257889088495"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-7595f8a3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa4cb188988dc6f1b3f4917d4dbc452150a5d871",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-84c444e4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97ac682b6f7d36be5d934f86c9911066540a68f1",
"digest": {
"length": 1010.0,
"function_hash": "273966576801297725817610381257889088495"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-8601bdcd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@134760263f6441741db0b2970e7face6b34b6d1c",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-a7975e20",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2",
"digest": {
"length": 1010.0,
"function_hash": "273966576801297725817610381257889088495"
},
"signature_version": "v1",
"target": {
"function": "_dpu_kms_hw_destroy",
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2022-49489-b86efd94",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa5186b279ecf44b14fb435540d2065be91cb1ed",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2022-49489-f44540df",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97ac682b6f7d36be5d934f86c9911066540a68f1",
"digest": {
"line_hashes": [
"128402204136205008945249922297760095197",
"139097579552656051861833795546785191663",
"154554418592506248577979074004938794761",
"173368113961814616632400252774131032424",
"22435140883083230491128676814164289127"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c"
},
"signature_type": "Line",
"deprecated": false
}
]