CVE-2022-49217

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the pm8001 send abort all() function, where the n elem field of the ccb used is not initialized to 0. This missing initialization can lead to the execution of invalid dma unmap sg() calls in pm8001 ccb task free(), causing a crash. The vulnerability can be avoided by always initializing the ccb n elem field to 0 in pm8001 send abort all(), pm8001 send read log(), and pm80xx send abort all().

Recommendations Always initialize the ccb n elem field to 0 in pm8001 send abort all(), pm8001 send read log(), and pm80xx send abort all() to avoid the issue. As a temporary workaround, consider disabling the pm8001 ccb task free() function until a patch is available. Restrict access to the vulnerable pm80xx module to minimize the risk of exploitation. Avoid using the ccb n elem field in the affected functions until the issue is resolved.