CVE-2022-49650

A flaw was found in the Linux kernel's Qualcomm Bus Access Manager (BAM) Direct Memory Access (DMA) driver. When the BAM device is controlled remotely, unbalanced runtime power management calls can trigger a reference count underflow. A local attacker could exploit this vulnerability to cause system instability, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity for Red Hat products because exploitation requires local access, relies on specific Qualcomm hardware configurations, and only results in a denial of service without compromising confidentiality or integrity. Standard enterprise Red Hat Enterprise Linux deployments do not utilize Qualcomm Bus Access Manager devices, meaning standard server workloads remain unaffected. The risk is constrained to specialized embedded or automotive platforms running supported Qualcomm chipsets where remote control of the DMA controller is actively configured.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.