CVE-2022-49650 Details
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: fix runtime PM underflow Commit dbad41e7bb5f ("dmaengine: qcom: bam_dma: check if the runtime pm enabled") caused unbalanced pm_runtime_get/put() calls when the bam is controlled remotely. This commit reverts it and just enables pm_runtime in all cases, the clk_* functions already just nop when the clock is NULL. Also clean up a bit by removing unnecessary bamclk null checks.
A vulnerability in the Linux kernel's DMA engine for Qualcomm BAM (Broadband Access Module) has been addressed. The issue arose from unbalanced power management calls when BAM was controlled remotely, following a previous commit that introduced a check for runtime power management. The latest fix reverts this change, ensuring that power management is consistently enabled, while also streamlining the code by removing unnecessary checks for null clock references.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0ac9c3dd0d6fe293cd5044cfad10bec27d171e4e | kernel.org | Patch |
| https://git.kernel.org/stable/c/2f6ded79068cac8cff41d5d5632564165d98ee12 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b702a1077b51fcb39507cc3bd39206f539319a96 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-191 | Integer Underflow (Wrap or Wraparound) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.17.1, < 5.15.54 >= 5.16, < 5.18.11 4.17 - 4.17 rc6 4.17 rc7 5.19 rc1 5.19 rc2 5.19 rc3 5.19 rc4 5.19 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 23, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |