PT-2024-8169 · Linux+3 · Linux Kernel+3
Published
2022-08-19
·
Updated
2025-06-18
·
CVE-2022-48704
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the drm/radeon component of the Linux kernel. It occurs when the radeon card fence waits for the GPU to finish processing current batch rings, but the radeon lockup work queue may not be fully flushed. Meanwhile, the radeon suspend kms() function calls pci set power state() to put the device in D3hot state. According to the PCI spec rev 4.0, in the D3hot state, only Configuration and Message requests are accepted, and other received requests must be handled as Unsupported Requests. This can lead to a kernel paging request error at a specific virtual address. The error is characterized by an "Oops" message and a kernel taint.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse