Resource Management Flaw in Linux Kernel Affects DP Auxiliary Bus

CVE-2022-50360

What is CVE-2022-50360?

A vulnerability in the Linux kernel can lead to resource management issues within the DP auxiliary bus. When device-managed resources are allocated after component binding, they may not be properly released if the binding of the aggregate DRM device is deferred. This can result in resource leaks or failures to bind when a subsequent allocation is attempted. The issue manifests with a failure message stating 'DP AUX EP device already populated' upon attempting to repopulate the bus. The fix aligns the lifetime of the EP device more closely with the aggregate DRM device to mitigate these risks.

References