CVE-2022-50360

drm/msm/dp: fix aux-bus EP lifetime

Medium · published September 17, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dp: fix aux-bus EP lifetime

Device-managed resources allocated post component bind must be tied to

the lifetime of the aggregate DRM device or they will not necessarily be

released when binding of the aggregate device is deferred.

This can lead resource leaks or failure to bind the aggregate device

when binding is later retried and a second attempt to allocate the

resources is made.

For the DP aux-bus, an attempt to populate the bus a second time will

simply fail ("DP AUX EP device already populated").

Fix this by tying the lifetime of the EP device to the DRM device rather

than DP controller platform device.

Patchwork: https://patchwork.freedesktop.org/patch/502672/

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Published
2025-09-17T14:56Z
EPSS history
Timeline
  • 17 SEP 14:56Z
    drm/msm/dp: fix aux-bus EP lifetime
    cvelistv5