CVE-2022-50741

Vulnerability

The Linux kernel's imx-jpeg driver contains a hardware bug where the interrupt STMBUF_HALF may be triggered after or during the disabling of interrupts. This spurious interrupt can cause an unexpected kernel panic, leading to a denial of service.

Exploitation

No special attack vector is required; the bug manifests during normal operation of the JPEG hardware encoder/decoder. The vulnerability is triggered when the driver disables interrupts, and a residual STMBUF_HALF interrupt fires, corrupting kernel state. No authentication or specific privileges are needed beyond access to the hardware, making it a local denial-of-service issue.

Impact

A successful trigger of this bug results in a kernel panic, crashing the system. The interrupts STMBUF_HALF and STMBUF_RTND are reported to have no other functional effect, so disabling them does not impact device operation.

Mitigation

The fix disables the STMBUF_HALF and STMBUF_RTND interrupts and clears any pending interrupt status during disable. The patch has been applied to stable kernel branches [1][2]. Users should update their kernels to the latest stable release.