CVE-2022-48778

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: gpmi: don't leak PM reference in error path

If gpmi_nfc_apply_timings() fails, the PM runtime usage counter must be dropped.

This vulnerability is rated as having a Moderate impact because exploitation requires local access and is constrained to systems utilizing specialized GPMI NAND controller hardware, which is uncommon in standard Red Hat Enterprise Linux enterprise deployments. The flaw stems from improper reference count management in the error handling path of the GPMI raw NAND driver, which can lead to runtime power management counter discrepancies and potential denial-of-service conditions. Because standard server environments rarely configure or interface directly with raw NAND flash memory, typical enterprise installations are not exposed to this issue during normal operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.