Linux Kernel Vulnerability in Coresight Product from Vendor

CVE-2022-50319

What is CVE-2022-50319?

A resource management vulnerability exists within the Linux kernel in the Coresight component. This issue has been observed when using the cpuhp_state_add_instance() and cpuhp_state_remove_instance() functions, which should be paired correctly to avoid issues during the removal of the cpuhp instance. Failure to adhere to this protocol can lead to warnings during cpuhp state removal operations, potentially destabilizing the system. When an attempt is made to remove a cpuhp state that still has instances associated with it, a warning is generated, calling attention to incomplete cleanup that could affect the kernel's operational integrity. It is crucial for system administrators to ensure that their kernel is updated to mitigate potential risks associated with this vulnerability.

References