CVE-2022-49490

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49490
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49490.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49490
Downstream
Related
Published
2025-02-26T02:13:27Z
Modified
2026-08-12T03:51:45Z
Summary
drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected

mdp5_get_global_state runs the risk of hitting a -EDEADLK when acquiring the modeset lock, but currently mdp5_pipe_release doesn't check for if an error is returned. Because of this, there is a possibility of mdp5_pipe_release hitting a NULL dereference error.

To avoid this, let's have mdp5_pipe_release check if mdp5_get_global_state returns an error and propogate that error.

Changes since v1:

  • Separated declaration and initialization of *new_state to avoid compiler warning
  • Fixed some spelling mistakes in commit message

Changes since v2:

  • Return 0 in case where hwpipe is NULL as this is considered normal behavior
  • Added 2nd patch in series to fix a similar NULL dereference issue in mdp5_mixer_release

Patchwork: https://patchwork.freedesktop.org/patch/485179/

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49490.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7907a0d77cb461f58045763c205a5830be72e97c
Fixed
776f5c58bfe16cf322d71eeed3c5dda1eeac7e6b
Fixed
b2aa2c4efe93e2580d6a8774b04fe2b99756a322
Fixed
49dc28b4b2e28ef7564e355c91487996c1cbebd7
Fixed
04bef5f1ba8ea6d7c1c8f5f65e0395c62db59cb8
Fixed
19964dfb39bda4d7716a71009488f0668ecbcf52
Fixed
33dc5aac46e0fad8f5eb193e5906ed0eb6b66ceb
Fixed
d59be579fa932c46b908f37509f319cbd4ca9a68

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49490.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.18.0
Fixed
4.19.247
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.198
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.121
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.46
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.14
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49490.json"