CVE-2022-50489

A resource leak flaw was found in the Linux kernel's MIPI-DSI host driver in the device removal logic. A local user can trigger this issue by unregistering a MIPI-DSI host, causing the cleanup code to unregister all attached devices without first detaching them. This prevents the host from performing proper cleanup operations, resulting in resource leaks including memory, references, and hardware state, leading to denial of service through resource exhaustion.

The mipi_dsi_host_unregister function iterates through all MIPI-DSI devices attached to the host and calls device_unregister on each. However, it skips the detachment step that would normally invoke the host's detach callback, allowing the host driver to release resources associated with that device. This means allocated memory, DMA mappings, clock references, power domain associations, and other resources remain allocated even after the device is unregistered. Since the host is being removed, these resources cannot be cleaned up later and represent permanent leaks until system reboot.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.