CVE-2022-50489
published 2025-10-04CVE-2022-50489: In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host is unregistered, the code of
mipi_dsi_host_unregister() loops over every device currently found on that
bus and will unregister it.
However, it doesn't detach it from the bus first, which leads to all kind
of resource leaks if the host wants to perform some clean up whenever a
device is detached.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < c202cda08cd5693645d4990ad1eb2e8068a884ec | c202cda08cd5693645d4990ad1eb2e8068a884ec |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 262364574b05676d4b9ebde2ddd3588cd2efd8ce | 262364574b05676d4b9ebde2ddd3588cd2efd8ce |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 95ae458209f5a556bba98aff872f933694914eb7 | 95ae458209f5a556bba98aff872f933694914eb7 |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 8242167cfc83dd7e4c96f44b45f108db9bb88146 | 8242167cfc83dd7e4c96f44b45f108db9bb88146 |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 45120fa5e522d444e3fc1c5a9afc5d53eed91d00 | 45120fa5e522d444e3fc1c5a9afc5d53eed91d00 |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 26c1b4cfe56f040f71a51c92da1f4cac2e3b9455 | 26c1b4cfe56f040f71a51c92da1f4cac2e3b9455 |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 353ab1c13fdd6e524edde780235a8ce9b892c81c | 353ab1c13fdd6e524edde780235a8ce9b892c81c |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 6fc2cd40db1969ba372ce9536dcfcdb87271eac4 | 6fc2cd40db1969ba372ce9536dcfcdb87271eac4 |
| linux | linux | >= 068a00233969833f1ba925e7627797489efd6041 < 668a8f17b5290d04ef7343636a5588a0692731a1 | 668a8f17b5290d04ef7343636a5588a0692731a1 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 3.14 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 4.10 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: drm/mipi-dsi: Detach devices when removing the host
vendor_redhat·2025-10-04·CVSS 5.5
CVE-2022-50489 [MEDIUM] CWE-459 kernel: drm/mipi-dsi: Detach devices when removing the host
kernel: drm/mipi-dsi: Detach devices when removing the host
In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host is unregistered, the code of
mipi_dsi_host_unregister() loops over every device currently found on that
bus and will unregister it.
However, it doesn't detach it from the bus first, which leads to all kind
of resource leaks if the host wants to perform some clean up whenever a
device is detached.
A resource leak flaw was found in the Linux kernel's MIPI-DSI host driver in the device removal logic. A local user can trigger this issue by unregistering a MIPI-DSI host, causing the cleanup code to unregister all attached devices without first detaching them. This prevents the host from pe
Debian
CVE-2022-50489: linux - In the Linux kernel, the following vulnerability has been resolved: drm/mipi-ds...
vendor_debian·2022·CVSS 5.5
CVE-2022-50489 [MEDIUM] CVE-2022-50489: linux - In the Linux kernel, the following vulnerability has been resolved: drm/mipi-ds...
In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it. However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
OSV
CVE-2022-50489: In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is
osv·2025-10-04·CVSS 5.5
CVE-2022-50489 [MEDIUM] CVE-2022-50489: In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is
In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it. However, it doesn't detach it from the bus first, which leads to all kind of resource leaks if the host wants to perform some clean up whenever a device is detached.
GHSA
GHSA-5xpc-qj79-9qw9: In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host i
ghsa_unreviewed·2025-10-04
CVE-2022-50489 [MEDIUM] GHSA-5xpc-qj79-9qw9: In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host i
In the Linux kernel, the following vulnerability has been resolved:
drm/mipi-dsi: Detach devices when removing the host
Whenever the MIPI-DSI host is unregistered, the code of
mipi_dsi_host_unregister() loops over every device currently found on that
bus and will unregister it.
However, it doesn't detach it from the bus first, which leads to all kind
of resource leaks if the host wants to perform some clean up whenever a
device is detached.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/262364574b05676d4b9ebde2ddd3588cd2efd8cehttps://git.kernel.org/stable/c/26c1b4cfe56f040f71a51c92da1f4cac2e3b9455https://git.kernel.org/stable/c/353ab1c13fdd6e524edde780235a8ce9b892c81chttps://git.kernel.org/stable/c/45120fa5e522d444e3fc1c5a9afc5d53eed91d00https://git.kernel.org/stable/c/668a8f17b5290d04ef7343636a5588a0692731a1https://git.kernel.org/stable/c/6fc2cd40db1969ba372ce9536dcfcdb87271eac4https://git.kernel.org/stable/c/8242167cfc83dd7e4c96f44b45f108db9bb88146https://git.kernel.org/stable/c/95ae458209f5a556bba98aff872f933694914eb7https://git.kernel.org/stable/c/c202cda08cd5693645d4990ad1eb2e8068a884ec
2025-10-04
Published