CVE-2022-49128

drm/bridge: Add missing pm_runtime_put_sync

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: Add missing pm_runtime_put_sync

pm_runtime_get_sync() will increase the rumtime PM counter even when it returns an error. Thus a pairing decrement is needed to prevent refcount leak. Fix this by replacing this API with pm_runtime_resume_and_get(), which will not change the runtime PM counter on error. Besides, a matching decrement is needed on the error handling path to keep the counter balanced.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	44cfc6233447cb2cf47aeb99457de35826a363f6 to before ff13c90d7f7ab606b37be6d15140d19013d6736cAffected 44cfc6233447cb2cf47aeb99457de35826a363f6 to before 792533e54cd6e89191798ccd1abd590c62b9077eAffected 44cfc6233447cb2cf47aeb99457de35826a363f6 to before 9df80dc738926a2ea4bd1ce5993c3d0f4b0e855cAffected 44cfc6233447cb2cf47aeb99457de35826a363f6 to before 46f47807738441e354873546dde0b000106c068aAffected
LinuxLinux	5.8Affected before 5.8Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.*Not affected 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.