{
  "cveId": "CVE-2022-49841",
  "url": "https://patchblox.com/security/cve/CVE-2022-49841",
  "summary": "CVE-2022-49841 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49841, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: imx: Add missing .thaw_noirq hook  The f...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  serial: imx: Add missing .thaw_noirq hook  The following warning is seen with non-console UART instance when system hibernates.  [   37.371969] ------------[ cut here ]------------ [   37.376599] uart3_root_clk already disabled [   37.380810] WARNING: CPU: 0 PID: 296 at drivers/clk/clk.c:952 clk_core_disable\u002B0xa4/0xb0 ... [   37.506986] Call trace: [   37.509432]  clk_core_disable\u002B0xa4/0xb0 [   37.513270]  clk_disable\u002B0x34/0x50 [   37.516672]  imx_uart_thaw\u002B0x38/0x5c [   37.520250]  platform_pm_thaw\u002B0x30/0x6c [   37.524089]  dpm_run_callback.constprop.0\u002B0x3c/0xd4 [   37.528972]  device_resume\u002B0x7c/0x160 [   37.532633]  dpm_resume\u002B0xe8/0x230 [   37.536036]  hibernation_snapshot\u002B0x288/0x430 [   37.540397]  hibernate\u002B0x10c/0x2e0 [   37.543798]  state_store\u002B0xc4/0xd0 [   37.547203]  kobj_attr_store\u002B0x1c/0x30 [   37.550953]  sysfs_kf_write\u002B0x48/0x60 [   37.554619]  kernfs_fop_write_iter\u002B0x118/0x1ac [   37.559063]  new_sync_write\u002B0xe8/0x184 [   37.562812]  vfs_write\u002B0x230/0x290 [   37.566214]  ksys_write\u002B0x68/0xf4 [   37.569529]  __arm64_sys_write\u002B0x20/0x2c [   37.573452]  invoke_syscall.constprop.0\u002B0x50/0xf0 [   37.578156]  do_el0_svc\u002B0x11c/0x150 [   37.581648]  el0_svc\u002B0x30/0x140 [   37.584792]  el0t_64_sync_handler\u002B0xe8/0xf0 [   37.588976]  el0t_64_sync\u002B0x1a0/0x1a4 [   37.592639] ---[ end trace 56e22eec54676d75 ]---  On hibernating, pm core calls into related hooks in sequence like:      .freeze     .freeze_noirq     .thaw_noirq     .thaw  With .thaw_noirq hook being absent, the clock will be disabled in a unbalanced call which results the warning above.      imx_uart_freeze()         clk_prepare_enable()     imx_uart_suspend_noirq()         clk_disable()     imx_uart_thaw         clk_disable_unprepare()  Adding the missing .thaw_noirq hook as imx_uart_resume_noirq() will have the call sequence corrected as below and thus fix the warning.      imx_uart_freeze()         clk_prepare_enable()     imx_uart_suspend_noirq()         clk_disable()     imx_uart_resume_noirq()         clk_enable()     imx_uart_thaw         clk_disable_unprepare()",
  "published": "2025-05-01T15:16:07Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00202,
  "epssPercentile": 0.10268,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49841",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49841",
      "released": "2025-05-01T15:16:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49841",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49841",
      "released": "2025-05-01T15:16:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49841",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49841",
      "released": "2025-05-01T15:16:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}