{
  "cveId": "CVE-2022-49458",
  "url": "https://patchblox.com/security/cve/CVE-2022-49458",
  "summary": "CVE-2022-49458 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49458, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm: don\u0027t free the IRQ if it was not reques...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/msm: don\u0027t free the IRQ if it was not requested  As msm_drm_uninit() is called from the msm_drm_init() error path, additional care should be necessary as not to call the free_irq() for the IRQ that was not requested before (because an error occured earlier than the request_irq() call).  This fixed the issue reported with the following backtrace:  [    8.571329] Trying to free already-free IRQ 187 [    8.571339] WARNING: CPU: 0 PID: 76 at kernel/irq/manage.c:1895 free_irq\u002B0x1e0/0x35c [    8.588746] Modules linked in: pmic_glink pdr_interface fastrpc qrtr_smd snd_soc_hdmi_codec msm fsa4480 gpu_sched drm_dp_aux_bus qrtr i2c_qcom_geni crct10dif_ce qcom_stats qcom_q6v5_pas drm_display_helper gpi qcom_pil_info drm_kms_helper qcom_q6v5 qcom_sysmon qcom_common qcom_glink_smem qcom_rng mdt_loader qmi_helpers phy_qcom_qmp ufs_qcom typec qnoc_sm8350 socinfo rmtfs_mem fuse drm ipv6 [    8.624154] CPU: 0 PID: 76 Comm: kworker/u16:2 Not tainted 5.18.0-rc5-next-20220506-00033-g6cee8cab6089-dirty #419 [    8.624161] Hardware name: Qualcomm Technologies, Inc. SM8350 HDK (DT) [    8.641496] Workqueue: events_unbound deferred_probe_work_func [    8.647510] pstate: 604000c5 (nZCv daIF \u002BPAN -UAO -TCO -DIT -SSBS BTYPE=--) [    8.654681] pc : free_irq\u002B0x1e0/0x35c [    8.658454] lr : free_irq\u002B0x1e0/0x35c [    8.662228] sp : ffff800008ab3950 [    8.665642] x29: ffff800008ab3950 x28: 0000000000000000 x27: ffff16350f56a700 [    8.672994] x26: ffff1635025df080 x25: ffff16350251badc x24: ffff16350251bb90 [    8.680343] x23: 0000000000000000 x22: 00000000000000bb x21: ffff16350e8f9800 [    8.687690] x20: ffff16350251ba00 x19: ffff16350cbd5880 x18: ffffffffffffffff [    8.695039] x17: 0000000000000000 x16: ffffa2dd12179434 x15: ffffa2dd1431d02d [    8.702391] x14: 0000000000000000 x13: ffffa2dd1431d028 x12: 662d79646165726c [    8.709740] x11: ffffa2dd13fd2438 x10: 000000000000000a x9 : 00000000000000bb [    8.717111] x8 : ffffa2dd13fd23f0 x7 : ffff800008ab3750 x6 : 00000000fffff202 [    8.724487] x5 : ffff16377e870a18 x4 : 00000000fffff202 x3 : ffff735a6ae1b000 [    8.731851] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff1635015f8000 [    8.739217] Call trace: [    8.741755]  free_irq\u002B0x1e0/0x35c [    8.745198]  msm_drm_uninit.isra.0\u002B0x14c/0x294 [msm] [    8.750548]  msm_drm_bind\u002B0x28c/0x5d0 [msm] [    8.755081]  try_to_bring_up_aggregate_device\u002B0x164/0x1d0 [    8.760657]  __component_add\u002B0xa0/0x170 [    8.764626]  component_add\u002B0x14/0x20 [    8.768337]  dp_display_probe\u002B0x2a4/0x464 [msm] [    8.773242]  platform_probe\u002B0x68/0xe0 [    8.777043]  really_probe.part.0\u002B0x9c/0x28c [    8.781368]  __driver_probe_device\u002B0x98/0x144 [    8.785871]  driver_probe_device\u002B0x40/0x140 [    8.790191]  __device_attach_driver\u002B0xb4/0x120 [    8.794788]  bus_for_each_drv\u002B0x78/0xd0 [    8.798751]  __device_attach\u002B0xdc/0x184 [    8.802713]  device_initial_probe\u002B0x14/0x20 [    8.807031]  bus_probe_device\u002B0x9c/0xa4 [    8.810991]  deferred_probe_work_func\u002B0x88/0xc0 [    8.815667]  process_one_work\u002B0x1d0/0x320 [    8.819809]  worker_thread\u002B0x14c/0x444 [    8.823688]  kthread\u002B0x10c/0x110 [    8.827036]  ret_from_fork\u002B0x10/0x20  Patchwork: https://patchwork.freedesktop.org/patch/485422/",
  "published": "2025-02-26T07:01:22Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00261,
  "epssPercentile": 0.17952,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49458",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49458",
      "released": "2025-02-26T07:01:22Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49458",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49458",
      "released": "2025-02-26T07:01:22Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.18.5-1",
      "fix": "DEBIAN-CVE-2022-49458",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49458",
      "released": "2025-02-26T07:01:22Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}