CVE-2022-48704

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the drm/radeon component of the Linux kernel. It occurs when the radeon card fence waits for the GPU to finish processing current batch rings, but the radeon lockup work queue may not be fully flushed. Meanwhile, the radeon suspend kms() function calls pci set power state() to put the device in D3hot state. According to the PCI spec rev 4.0, in the D3hot state, only Configuration and Message requests are accepted, and other received requests must be handled as Unsupported Requests. This can lead to a kernel paging request error at a specific virtual address. The error is characterized by an "Oops" message and a kernel taint.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.