CVE-2022-50029

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

clk: qcom: ipq8074: dont disable gcc_sleep_clk_src

Once the usb sleep clocks are disabled, clock framework is trying to

disable the sleep clock source also.

However, it seems that it cannot be disabled and trying to do so produces:

[ 245.436390] ------------[ cut here ]------------

[ 245.441233] gcc_sleep_clk_src status stuck at 'on'

[ 245.441254] WARNING: CPU: 2 PID: 223 at clk_branch_wait+0x130/0x140

[ 245.450435] Modules linked in: xhci_plat_hcd xhci_hcd dwc3 dwc3_qcom leds_gpio

[ 245.456601] CPU: 2 PID: 223 Comm: sh Not tainted 5.18.0-rc4 #215

[ 245.463889] Hardware name: Xiaomi AX9000 (DT)

[ 245.470050] pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

[ 245.474307] pc : clk_branch_wait+0x130/0x140

[ 245.481073] lr : clk_branch_wait+0x130/0x140

[ 245.485588] sp : ffffffc009f2bad0

[ 245.489838] x29: ffffffc009f2bad0 x28: ffffff8003e6c800 x27: 0000000000000000

[ 245.493057] x26: 00000000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References