CVE-2022-49460
PM / devfreq: rk3399_dmc: Disable edev on remove()
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399_dmc: Disable edev on remove() Otherwise we hit an unablanced enable-count when unbinding the DFI device: [ 1279.659119] ------------[ cut here ]------------ [ 1279.659179] WARNING: CPU: 2 PID: 5638 at drivers/devfreq/devfreq-event.c:360 devfreq_event_remove_edev+0x84/0x8c ... [ 1279.659352] Hardware name: Google Kevin (DT) [ 1279.659363] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO BTYPE=--) [ 1279.659371] pc : devfreq_event_remove_edev+0x84/0x8c [ 1279.659380] lr : devm_devfreq_event_release+0x1c/0x28 ... [ 1279.659571] Call trace: [ 1279.659582] devfreq_event_remove_edev+0x84/0x8c [ 1279.659590] devm_devfreq_event_release+0x1c/0x28 [ 1279.659602] release_nodes+0x1cc/0x244 [ 1279.659611] devres_release_all+0x44/0x60 [ 1279.659621] device_release_driver_internal+0x11c/0x1ac [ 1279.659629] device_driver_detach+0x20/0x2c [ 1279.659641] unbind_store+0x7c/0xb0 [ 1279.659650] drv_attr_store+0x2c/0x40 [ 1279.659663] sysfs_kf_write+0x44/0x58 [ 1279.659672] kernfs_fop_write_iter+0xf4/0x190 [ 1279.659684] vfs_write+0x2b0/0x2e4 [ 1279.659693] ksys_write+0x80/0xec [ 1279.659701] __arm64_sys_write+0x24/0x30 [ 1279.659714] el0_svc_common+0xf0/0x1d8 [ 1279.659724] do_el0_svc_compat+0x28/0x3c [ 1279.659738] el0_svc_compat+0x10/0x1c [ 1279.659746] el0_sync_compat_handler+0xa8/0xcc [ 1279.659758] el0_sync_compat+0x188/0x1c0 [ 1279.659768] ---[ end trace cec200e5094155b4 ]---
Timeline
ID reserved
By Linux
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < 664736e2cc09e504ce58ec61164d029d1f2651bb
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < a0180e324a9a63de8f770da300477b48cb4a53f1
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < 86b091b6894c449d2734de7aa7d79ccb33ffd97d
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < cb1be1d4be18fe286ba5a67d928598378fd7fbe5
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < fb089b6f21de03a685dd31df3789bbb01c59f8e3
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < a9c2b23a7ac6ab19214cad8cac8af8608a4d9cef
- affected 5a893e31a636cca3798af2db5aee8d3d144b1e1e – < 2fccf9e6050e0e3b8b4cd275d41daf7f7fa22804
- affected 4.9
- unaffected < 4.9
- unaffected 4.19.247 – ≤ 4.19.*
- unaffected 5.4.198 – ≤ 5.4.*
- unaffected 5.10.121 – ≤ 5.10.*
- unaffected 5.15.46 – ≤ 5.15.*
- unaffected 5.17.14 – ≤ 5.17.*
- unaffected 5.18.3 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (7)
- https://git.kernel.org/stable/c/664736e2cc09e504ce58ec61164d029d1f2651bb (opens in a new tab)
- https://git.kernel.org/stable/c/a0180e324a9a63de8f770da300477b48cb4a53f1 (opens in a new tab)
- https://git.kernel.org/stable/c/86b091b6894c449d2734de7aa7d79ccb33ffd97d (opens in a new tab)
- https://git.kernel.org/stable/c/cb1be1d4be18fe286ba5a67d928598378fd7fbe5 (opens in a new tab)
- https://git.kernel.org/stable/c/fb089b6f21de03a685dd31df3789bbb01c59f8e3 (opens in a new tab)
- https://git.kernel.org/stable/c/a9c2b23a7ac6ab19214cad8cac8af8608a4d9cef (opens in a new tab)
- https://git.kernel.org/stable/c/2fccf9e6050e0e3b8b4cd275d41daf7f7fa22804 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49460)Record last updated .