Bug 2348244 (CVE-2022-49525) - CVE-2022-49525 kernel: media: cx25821: Fix the warning when removing the module
Summary: CVE-2022-49525 kernel: media: cx25821: Fix the warning when removing the module
Keywords:
Status: NEW
Alias: CVE-2022-49525
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-02-26 03:22 UTC by OSIDB Bzimport
Modified: 2025-02-27 15:23 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-02-26 03:22:40 UTC
In the Linux kernel, the following vulnerability has been resolved:

media: cx25821: Fix the warning when removing the module

When removing the module, we will get the following warning:

[   14.746697] remove_proc_entry: removing non-empty directory 'irq/21', leaking at least 'cx25821[1]'
[   14.747449] WARNING: CPU: 4 PID: 368 at fs/proc/generic.c:717 remove_proc_entry+0x389/0x3f0
[   14.751611] RIP: 0010:remove_proc_entry+0x389/0x3f0
[   14.759589] Call Trace:
[   14.759792]  <TASK>
[   14.759975]  unregister_irq_proc+0x14c/0x170
[   14.760340]  irq_free_descs+0x94/0xe0
[   14.760640]  mp_unmap_irq+0xb6/0x100
[   14.760937]  acpi_unregister_gsi_ioapic+0x27/0x40
[   14.761334]  acpi_pci_irq_disable+0x1d3/0x320
[   14.761688]  pci_disable_device+0x1ad/0x380
[   14.762027]  ? _raw_spin_unlock_irqrestore+0x2d/0x60
[   14.762442]  ? cx25821_shutdown+0x20/0x9f0 [cx25821]
[   14.762848]  cx25821_finidev+0x48/0xc0 [cx25821]
[   14.763242]  pci_device_remove+0x92/0x240

Fix this by freeing the irq before call pci_disable_device().

Comment 1 Avinash Hanwate 2025-02-26 19:36:51 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022611-CVE-2022-49525-efd9@gregkh/T

Comment 2 Avinash Hanwate 2025-02-27 15:16:49 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022611-CVE-2022-49525-efd9@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.