PT-2025-8120 · Linux+2 · Linux Kernel+2
Jan Sondhauss
·
Publicado
2022-03-23
·
Atualizado
2025-04-14
·
CVE-2022-49192
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue in the Linux kernel has been identified, where the
cpsw ethtool begin function may return inconsistent values, leading to incorrect calls to pm runtime put. This inconsistency can cause the cpsw device to be left in a suspended state, resulting in access violations later on. The problem arises from the pm runtime get sync function returning 1 when the device is already active, which is the common case for cpsw ethtool begin.Recommendations
To resolve this issue, consider using the
pm runtime resume and get function, which is designed to handle this situation more effectively. This function should be used in place of pm runtime get sync to ensure consistent runtime management and prevent the cpsw device from being suspended incorrectly.Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Suse