CVE-2022-49650: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: fix runtime PM underflow Commit dbad41e7bb5f ("dmaengine: qcom: bam_dma: check if the runtime pm enabled") caused unbalanced pm_runtime_get/put() calls when the bam is controlled remotely. This commit reverts it and just enables pm_runtime in all cases, the clk_* functions already just nop when the clock is NULL. Also clean up a bit by removing unnecessary bamclk null checks.

Affected products

• Linux Linux Kernel: from 4.17.1, before 5.15.54 (fixed in 5.15.54); from 5.16, before 5.18.11 (fixed in 5.18.11); version 4.17 only; version 5.19 only

Published 2025-02-26. Last modified 2026-06-17.