{
  "cveId": "CVE-2022-48826",
  "url": "https://patchblox.com/security/cve/CVE-2022-48826",
  "summary": "CVE-2022-48826 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48826, released July 16, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/vc4: Fix deadlock on DSI device attach error...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/vc4: Fix deadlock on DSI device attach error  DSI device attach to DSI host will be done with host device\u0027s lock held.  Un-registering host in \u0022device attach\u0022 error path (ex: probe retry) will result in deadlock with below call trace and non operational DSI display.  Startup Call trace: [   35.043036]  rt_mutex_slowlock.constprop.21\u002B0x184/0x1b8 [   35.043048]  mutex_lock_nested\u002B0x7c/0xc8 [   35.043060]  device_del\u002B0x4c/0x3e8 [   35.043075]  device_unregister\u002B0x20/0x40 [   35.043082]  mipi_dsi_remove_device_fn\u002B0x18/0x28 [   35.043093]  device_for_each_child\u002B0x68/0xb0 [   35.043105]  mipi_dsi_host_unregister\u002B0x40/0x90 [   35.043115]  vc4_dsi_host_attach\u002B0xf0/0x120 [vc4] [   35.043199]  mipi_dsi_attach\u002B0x30/0x48 [   35.043209]  tc358762_probe\u002B0x128/0x164 [tc358762] [   35.043225]  mipi_dsi_drv_probe\u002B0x28/0x38 [   35.043234]  really_probe\u002B0xc0/0x318 [   35.043244]  __driver_probe_device\u002B0x80/0xe8 [   35.043254]  driver_probe_device\u002B0xb8/0x118 [   35.043263]  __device_attach_driver\u002B0x98/0xe8 [   35.043273]  bus_for_each_drv\u002B0x84/0xd8 [   35.043281]  __device_attach\u002B0xf0/0x150 [   35.043290]  device_initial_probe\u002B0x1c/0x28 [   35.043300]  bus_probe_device\u002B0xa4/0xb0 [   35.043308]  deferred_probe_work_func\u002B0xa0/0xe0 [   35.043318]  process_one_work\u002B0x254/0x700 [   35.043330]  worker_thread\u002B0x4c/0x448 [   35.043339]  kthread\u002B0x19c/0x1a8 [   35.043348]  ret_from_fork\u002B0x10/0x20  Shutdown Call trace: [  365.565417] Call trace: [  365.565423]  __switch_to\u002B0x148/0x200 [  365.565452]  __schedule\u002B0x340/0x9c8 [  365.565467]  schedule\u002B0x48/0x110 [  365.565479]  schedule_timeout\u002B0x3b0/0x448 [  365.565496]  wait_for_completion\u002B0xac/0x138 [  365.565509]  __flush_work\u002B0x218/0x4e0 [  365.565523]  flush_work\u002B0x1c/0x28 [  365.565536]  wait_for_device_probe\u002B0x68/0x158 [  365.565550]  device_shutdown\u002B0x24/0x348 [  365.565561]  kernel_restart_prepare\u002B0x40/0x50 [  365.565578]  kernel_restart\u002B0x20/0x70 [  365.565591]  __do_sys_reboot\u002B0x10c/0x220 [  365.565605]  __arm64_sys_reboot\u002B0x2c/0x38 [  365.565619]  invoke_syscall\u002B0x4c/0x110 [  365.565634]  el0_svc_common.constprop.3\u002B0xfc/0x120 [  365.565648]  do_el0_svc\u002B0x2c/0x90 [  365.565661]  el0_svc\u002B0x4c/0xf0 [  365.565671]  el0t_64_sync_handler\u002B0x90/0xb8 [  365.565682]  el0t_64_sync\u002B0x180/0x184",
  "published": "2024-07-16T12:15:06Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.002,
  "epssPercentile": 0.09873,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48826",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48826",
      "released": "2024-07-16T12:15:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48826",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48826",
      "released": "2024-07-16T12:15:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48826",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48826",
      "released": "2024-07-16T12:15:06Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}