CVE-2022-49175

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

PM: core: keep irq flags in device_pm_check_callbacks()

The function device_pm_check_callbacks() can be called under the spin

lock (in the reported case it happens from genpd_add_device() ->

dev_pm_domain_set(), when the genpd uses spinlocks rather than mutexes.

However this function uncoditionally uses spin_lock_irq() /

spin_unlock_irq(), thus not preserving the CPU flags. Use the

irqsave/irqrestore instead.

The backtrace for the reference:

[ 2.752010] ------------[ cut here ]------------

[ 2.756769] raw_local_irq_restore() called with IRQs enabled

[ 2.762596] WARNING: CPU: 4 PID: 1 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x34/0x50

[ 2.772338] Modules linked in:

[ 2.775487] CPU: 4 PID: 1 Comm: swapper/0 Tainted: G S 5.17.0-rc6-00384-ge330d0d82eff-dirty #684

[ 2.781384] Freeing initrd memory: 46024K

[ 2.785839] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References