{
  "cveId": "CVE-2022-49427",
  "url": "https://patchblox.com/security/cve/CVE-2022-49427",
  "summary": "CVE-2022-49427 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49427, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/mediatek: Remove clk_disable in mtk_iommu_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  iommu/mediatek: Remove clk_disable in mtk_iommu_remove  After the commit b34ea31fe013 (\u0022iommu/mediatek: Always enable the clk on resume\u0022), the iommu clock is controlled by the runtime callback. thus remove the clk control in the mtk_iommu_remove.  Otherwise, it will warning like:  echo 14018000.iommu \u003E /sys/bus/platform/drivers/mtk-iommu/unbind  [   51.413044] ------------[ cut here ]------------ [   51.413648] vpp0_smi_iommu already disabled [   51.414233] WARNING: CPU: 2 PID: 157 at */v5.15-rc1/kernel/mediatek/                           drivers/clk/clk.c:952 clk_core_disable\u002B0xb0/0xb8 [   51.417174] Hardware name: MT8195V/C(ENG) (DT) [   51.418635] pc : clk_core_disable\u002B0xb0/0xb8 [   51.419177] lr : clk_core_disable\u002B0xb0/0xb8 ... [   51.429375] Call trace: [   51.429694]  clk_core_disable\u002B0xb0/0xb8 [   51.430193]  clk_core_disable_lock\u002B0x24/0x40 [   51.430745]  clk_disable\u002B0x20/0x30 [   51.431189]  mtk_iommu_remove\u002B0x58/0x118 [   51.431705]  platform_remove\u002B0x28/0x60 [   51.432197]  device_release_driver_internal\u002B0x110/0x1f0 [   51.432873]  device_driver_detach\u002B0x18/0x28 [   51.433418]  unbind_store\u002B0xd4/0x108 [   51.433886]  drv_attr_store\u002B0x24/0x38 [   51.434363]  sysfs_kf_write\u002B0x40/0x58 [   51.434843]  kernfs_fop_write_iter\u002B0x164/0x1e0",
  "published": "2025-02-26T07:01:19Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00268,
  "epssPercentile": 0.1908,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49427",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49427",
      "released": "2025-02-26T07:01:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49427",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49427",
      "released": "2025-02-26T07:01:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49427",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49427",
      "released": "2025-02-26T07:01:19Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}